Add some docstrings/comments.
WIP: Start writing unit tests

In particular, test malicious inputs.

This isn't quite working yet -- for some reason the <p> tag is also not
detected.
Add test-requirements.txt
Fix unit test.

Needed to search for './/tag' -- 'tag' doesn't search sub elements.
Modularize santization tests.