Use bleach for HTML sanitization instead of an one-off solution