Allow safe tags only in discussion reply md

Restricts HTML tags in discussion replies to a safe allowlist, blocking XSS.