Support HTML message rendering

[benmelz]

Bustracker:

This app:

Since Avail supports it, I guess we don't really have a choice either. Shouldn't be that bad, the two possible pain points I foresee are:

• picking a good sanitized rendering method
• getting that rendering method to play nice with react

[benmelz]

Quick research presents two options:

• this react feature, which would require us to come up with our own sanitization process
• this library, which seems to take care of everything, but should probably be vetted a bit VETTING FAILED

[werebus]

From the FAQ on html-react-parser:

Is this XSS safe?

No, this library is not XSS (cross-site scripting) safe. See #94.

Does invalid HTML get sanitized?

No, this library does not sanitize HTML. See #124, #125, and #141.

[werebus]

However, possibly useful examples in the comments of one of those issues:

• Using sanitize-html
• Using DOMPurify