html::clean() : Make allowed tags and iframes configurable