Moving html sanitizer to backend API for platform consistency