HTMLPurifier leaks fixed