fix tagName comparison
don't use `result.safe` to communicate incomplete information
remove unused security warning