Sanitize HTML loaded into the SelectionIndicator

This uses Google caja by default, specifically, a slightly tweaked
version of the JsHtmlSantizer object from https://github.com/mapbox/sanitize-caja.
Merge pull request #1411 from AnalyticalGraphicsInc/selection-sanitizeHtml

Sanitize HTML loaded into the SelectionIndicator