Describe the security situation around encodings and require browsers to not mess around with utf-16

https://www.w3.org/Bugs/Public/show_bug.cgi?id=19961