include html-sanitizer.js