improve sanitizing of rich component markup (#220)