sanitize html <b>bold</b><script>var foo</script>
Result
