Allowing every format is way more than what we initially intended. I've only added h2 and h3 because h1 is set somewhere else in the page (like the title), and h4, h5 and h6 are usually not necessary.
We're not sure why it was removed, and we're using server-side sanitizers to remove dangerous HTML.
add links, headers and images
