sanitized HTML for validity