I want to use a white list of tags, attributes and values to sanitize a html string, before I place it