Replace util.esc with bleach
Use https://bleach.readthedocs.io/en/latest/clean.html#allowed-tags-tags instead of my homespun escape method.
Use https://bleach.readthedocs.io/en/latest/clean.html#allowed-tags-tags instead of my homespun escape method.