Test existing break_long_words
Switch break_long_words to use Unicode WBR instead
Adjust break_long_words to also strip_tags

This commit provides a test for the new behavior.
Remark on escaping
Never mark break_long_words output as safe

The function tells us to not do that, so now we stop doing that.

This also fixes the XSS vector remarked-upon in
https://openhatch.org/bugs/issue915

Huge props to pik4chu on the website for finding that.
Use curl instead of wget

The story seems to be that wget is incompatible with
Subject Alternative Name, which our SSL certs just switched
to using because we are now behind CloudFlare.
Permit people to override the BASE_DIR

This way, one can test the script locally on a development machine.