record_messages = function (msg, opts) {
            console.log("HTML Sanitizer", msg, opts);
        }
sanitize HTML
if allow_css is true (default: false), CSS is sanitized as well.
otherwise, CSS elements and attributes are simply removed.