DOMPurify is a great library, BTW. Super small, super safe by default, no security holes found in months/years