Add failing specs for VulnerableScriptSanitizer