config file, strip html and scripts