make pdf work too, strip out all tags but the specifics we allow, and un-escape entities