[xss] added tag_whitelist for wiki/md