Use font tags, whitelist the used font tags

`style` is hard to validate, so I switched it to use font tags. And actually whitelist the stuff it generates FailFish.

Done now.
![image](https://cloud.githubusercontent.com/assets/627891/4787404/708e24e4-5daa-11e4-8c9f-664b41159c1d.png)