Strips <script, </script, onerror, onload, javascript:, <svg and <img. Find what the list misses (case, onfocus, <details>, entities).