I'm developing a plugin which enables the user to send HTML emails from within the WordPress admin. How should I sanitize the textarea input? It has to be able to contain the whole range of HTML tags that might appear in an HTML email. If I use wp_kses()
then I would have to use a huge list of allowed tags.
The textarea saves its content to the db via custom options.