Sure, it would be cool to have a way to whitelit only certain tags (even if some tags allow a background attribute that allows xss). For now, its okay to leave it as is, its an admin page.