Safely strip all DOM tags from a string to prevent XSS attacks - View it on GitHub