Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis
