A well-tested JavaScript library that cleans untrusted HTML before you display it, stripping out anything that could be used for a cross-site scripting attack. It's the go-to choice when you genuinely need to render user-submitted rich text.