document the HTML sanitization whitelist
Merge pull request #247 from mojavelinux/issue-245

document the HTML sanitization whitelist