strip_harmful_tags: expand the allowed list