Documentation on security_review_check_input_formats() is misleading

The documentation on security_review_check_input_formats() says its checking for formats which do not have HTML filtering, however it does check that. It actually does two checks: if a format has filtering and the user role is non-trusted then check for unsafe tags, otherwise if checks if it does not have HTML filter.