Fixed $sanitize for simple attacks, attacks that use invalid html and $oldViewValue, and attacks that were uploaded to the server and served to others