whether `<strong>` or something else does not really matter.
The problem is, we need a tag an only want to allow this one tag. but still sanitize the rest of the string. Is it okay to do it like this?