title: Sanitize all scripts from html string
body: <p>The HTML5 clipboard is awesome, but I am looking for a way to make it safe.</p>
  
  <p>The user is pasting text/html into my webpage. This allows them to paste images, tables, etc.</p>
  
  <p>I am looking for a way to remove all scripts from the pasted content, before I add it to the page.</p>
  
  <p>I need to remove <code>&lt;script&gt;</code> elements, as well as other ways of executing scripts like</p>
  
  <pre><code>&lt;img src="x" onerror="alert('Hacked!')"&gt;
  </code></pre>
  
  <p>(and any others)</p>
  
  <p>I <em>do not</em> want to remove style elements, or any other sorts of elements. (They are actually pasting into an iframe, so styles won't affect anything else.)</p>