Remove XSS attack vectors from user-supplied HTML - View it on GitHub