add server side html sanitizing

[philburr]

Fixes issue #5

[julianlam]

Thanks @philburr :smile:

[drewdotpro]

For the less file, that gets updated by the redactor team without version control. It might make more sense for these changes to be in a separate file that can be loaded in over the top to override it.

[Bitti09]

I'm getting the following error after applying this pull request:

31/7 12:14 [13518] - error: /admin/plugins/composer-redactor TypeError: Object #

[philburr]

@Bitti09 Were you not getting the problem before the patch? I'm not getting the problem when I go to the Redactor admin page.

[philburr]

@drewdotpro I'm not terribly familiar with how the less stuff works. Alternatively we could lower the z-index of .composer from 10000 to 1000. I wasn't sure how this would impact other things. If you merge, let's skip the z-index patch for now until a better solution is done.

[julianlam]

To my knowledge, the composer only needs to have a z index lower than the taskbar.

[drewdotpro]

@Bitti09 I also had no trouble. Merged in changes, rolled back 'less file' changes, added them in an override file. Thanks @philburr