HTML sanitizer: Rails 4.2 compatibility