add global html sanitizer