add google-caja for HTML sanitization