Fixed html_sanitizer by replacing Python hairiness with XSLT.