I would recommend that you use [bleach](https://github.com/jsocol/bleach) 

Actually I'm pretty sure we're going to want this for the event description in the "main panel" where we might want to allow `<a>` tags but disallow all other tags. 

I can install it into the vendor-local lib since that's not super easy at the moment.