Fix CI_Security::_remove_evil_attributes() being way too aggressive
Previous commit caused side effects ...
Add <math> to 'naughty' HTML elements