explicitly specify what tags / attrs will pass HTML sanitizer