XSS sanitizer: replace wysihtml5 parser with DOMPurify.