Document sanitization

[twiss]

Spun out from #252 and #214.

This could look something like

• Parse the html
• Walk all elements and attributes and match them to a whitelist

The main difficulties are what to put in the whitelist, and performance (in the worst case we would be doing two unnecessary serialize -> parse steps).