a library for sanitizing arbitrary html input