Merge sanitizers, allow html one to work with fragments/maxLength

First shot at merging the two.