added <sub> and <sup> to the whitelist

subscript and superscript should also be allowed and filtered