Adding security.js with 1st attempt at is_safe.
Don't render insecure Markdown and show warning.