santizeHTML.js

function santizeHTML(riskyHTML){
  
  // create an invisible but fully functional HTML document
  var doc = document.implementation.createHTMLDocument();
  
  // set it's HTML to the HTML we need to santize
  doc.body.innerHtml = riskyHTML;
  
  // black list of tags we want to remove
	var badNodes = doc.querySelectorAll("script,style,link,object");
  
  // remove all bad tags found
	for (var i=0, len=badNodes.length; i < len; i++){
		badNodes[i].parentNode.removeChild(badNodes[i]);
	}
  
  // return the santized HTML
	return doc.body.innerHtml;
}