[html] Use a tag list instead of regexes to sanitize tags.
[html] HTML_NOFOLLOW_LINKS should add nofollow for autolinks.