added more html to whitelist