A tree-walking HTML sanitizer, based on python's bleach