-html-tags dangerous:drop unknown:drop invalid:drop
-html-attributes alphanumeric:prefix
-html-attributes dangerous:prefix unknown:prefix
-allow object
-block java javascript