SECURITY: Don't normalize U+FF3C to \

Bug: 58088
Change-Id: I3bb23a173120fbbb60795094cf2d26657751642f
SECURITY: Disallow stylesheets in svg

Bug: 57550
Change-Id: I80452f98048ef565d06b45f78d8baccdafdf6186