Check and handle when a tainted variable is used
Auto-untaint variables passed through 'escape'
Add tainting tests
Address code review comments

- clean up comment wording
- fix potentially leaky tests
Merge pull request #440 from Shopify/drop-tainting

Variable tainting