I'm developing a plugin which enables the user to send HTML emails from within the WordPress admin. How should I sanitize the textarea input? It has to be able to contain the whole range of HTML tags that might appear in an HTML email. If I use
wp_kses() then I would have to use a huge list of allowed tags.
The textarea saves its content to the db via custom options.