The stripImages and stripIframes methods didn't properly process inputs, leading to XSS vectors.
CWE-79, CWE-79