White-list based HTML sanitizer
