It looks like the TABLES PolicyFactory in Sanitizers class does not allow the colspan attribute on td and th elements.

I see no reason why it couldn't.