SECURITY: Improve css javascript detection

* Forbid vertical tabs
* Convert Fullwidth, sup/sub script, IPA, and repetition unicode to
ascii, for ie6

Bug: 55332
Change-Id: I41a71b5b8fbecadd0f958cf57cc90d4c2fd9366e
(cherry picked from commit feb23b469f98772d8ae0d054d0dba8883d677f05)
Merge "SECURITY: Improve css javascript detection" into REL1_22