sanitize untrusted HTML output

rather than checking is_safe
don't populate sanitized.safe by default

since it's potentially expensive.

walk nodes in is_safe
testing for sanitize
fix tagName comparison
don't use `result.safe` to communicate incomplete information
remove unused security warning
test style