Whitelist refinements

Went through the html elements and attributes to whitelist as much as currently possible (prior to subdomaining)