Safely parse HTML

Keywords wasn't being stripped out and so was being rendered to the page allowing for scripts to be ran.