These are already being stripped by the `<code` check above.  This function was not designed to take html or plain text (it assumes an html string)