client: Changed HTML sanitization of posts into a whitelist of allowed elements and attributes, and split off into a new file.