-html-tags dangerous:escape unknown:comment invalid:escape
-html-attributes alphanumeric:drop
-html-attributes dangerous:prefix novalue:drop unknown:drop on:prefix
-block javascript java