Whitelist only a few HTML tags.  Close #1.