Whitelist img tag and a list of attributes for all tags. Closes #192.