Probably the html sent by your instance is already sanitized, but I haven't checked the Mastodon source to be sure.
Only supports single user, lots of display elements not supported yet. But it actually has something to show. Actually display a home timeline. Still only single user, doesn't correctly handle boosts, CWs, and probably a lot of other things.