Wrong return type in Xss::attributes() docblock

Problem/Motivation

The docblock for Xss::attributes() says it returns a string but it returns an array.

Steps to reproduce

Proposed resolution

The correct type should be documented in the docblock.

Remaining tasks

User interface changes

Introduced terminology

API changes

Data model changes

Release notes snippet