Be carefull here: if you have a malicious user, you'll would have an XSS injection.

You dig there: https://github.com/Exercise/HTMLPurifierBundle