replace forbidden elements in html