tests: add tests for evil HTML filtering