Cleans HTML to avoid XSS attacks