FIX: properly whitelist <code> classes needed for syntax highlighting