Sanitize html, for browser environments