CI_Security: Also add <svg> to 'naughty' HTML elements