How to test an HTML sanitizer so the test means something

A sanitizer with green tests may be doing nothing. Three steps to test it so the suite measures what the sanitizer prevents.