 it into the returned string, however, since our parser is more strict than a typical browser
  parser, it&#39;s possible that some obscure input, which would be recognized as valid HTML by a
  browser, won&#39;t make it through the sanitizer. The input may also contain SVG markup.
  The whitelist is configured using the functions <code>aHrefSanitizationWhitelist</code> and
  <code>imgSrcSanitizationWhitelist</code> of <a href="api/ng/provider/$compileProvider"><code>$compileProvider</code></a>.</p>
</td>
 