#639: Add HTML Purifier to Composer

This commit prepares the solution of #639; where we are going to add an optional guard against
XSS attacks. The guard is optional because it slows down running phpDocumentor ten-fold and
90% of the projects have trusted developers.

For people doubting about trust or running public uncontrolled services can they enable this
safeguard.