Use xss.js to sanitize HTML mixed with Markdown. Closes #125.