Comment 5 for bug 1958539

> bleach is significantly slower than lxml

Well, make your choice between correctness (security) and performance :-D Today, I'm not aware of any open vulnerability in lxml, they are fixed quickly. But by design, bleach looks safer.