Remove XSS attack vectors from user-supplied HTML