document the HTML sanitization whitelist