Safely parse HTML

Keywords wasn't being stripped out and so was being rendered to the page
allowing for scripts to be ran.
Merge pull request #91 from alphagov/safely-parse-html

Safely parse HTML