sanitize untrusted HTML to prevent XSS attacks
https://github.com/yesodweb/haskell-xss-sanitize#readme