Actually using OWASP Java HTML Sanitizer, not AntiSamy per se.