Element.fromString: allow customizing of a sanitizing function

[ashklianko]

When creating elements from a string we run our source string through a DOMPurify sanitizing function without params. It appeared that in some cases we need to allow certain tags or attributes.
Add an optional param to this function with a custom config having tags/attributes fields on demand and give it to a sanitizing function