remove non XSS and not HTML5 vectors
add new API to start html5 parsing a non-standard state
use new api, test for xss in different html5 states
ignore