Sanitize html code receive from WR to avoid XSS