prevent XSS attacks by sanitizing html (this is different then escaping!) - View it on GitHub