Sanitize untrusted HTML to prevent XSS attacks
