allow some html in event details

we allow default sanitize tags.  so no script tags.