Update

- Removed escape-html.php
- updated allowed tags