title: How to add whitelist of tags for Java ESAPI
body: <p>We are adding Rich Text Editing to our site, including ability to add youtube videos. But from  the other hand we want to be still secure and prevent XSS/HTML injections. Previously we have used following code for escaping the data:</p>
  
  <pre><code>ESAPI.encoder().encodeForHTML
  ESAPI.encoder().encodeForJavaScript
  </code></pre>
  
  <p>And now we have to add some kind of whitelist of allowed tags. Is there is way to implement this feature?</p>