Port html sanitizer updates from SnuDown and add test cases