Bring SnuOwnd's HTML parser into sync with SnuDown

The version of SnuOwnd in HEAD has documented XSS issues.