Whitelist-based Common Lisp HTML sanitizer