ui:outputRichText : Whitelist supported HTML tags and remove event handlers

@bug W-1846336@
Disable Xunit test temporarily. Will be re-enabled tomorrow after changes.
Merging origin/jtroup/master-pending-outputRichTextSecurity into master