code: public static void sanitize(
        @Nullable String html, final Policy policy) {
      sanitize(html, policy, HtmlStreamEventProcessor.Processors.IDENTITY);
    }
docs: Sanitizes the given HTML by applying the given policy to it.
  
  <p>
  This method is not in the TCB.
  
  <p>
  This method has no return value since policies are assumed to render things
  they accept and do nothing on things they reject.
  Use {@link HtmlStreamRenderer} to render content to an output buffer.
  
  @param html A snippet of HTML to sanitize.  {@code null} is treated as the
  empty string and will not result in a {@code NullPointerException}.
  @param policy The Policy that will receive events based on the tokens in
  HTML.  Typically, this policy ends up routing the events to an
  {@link HtmlStreamRenderer} after filtering.
  {@link HtmlPolicyBuilder} provides an easy way to create policies.