REVIEW: Implement sanitizer class

 - caches sanitizer config
 - supports list-view mode where links are filtered out so we don't get
   invalid, problematic html.
 - add sandbox attribute to embedded iframes (fixes #65)
 - make document links `rel=nofollow`