Sanitize replacements (removes scripts and iframes)