AngularJS 1.6.8 ngSanitize bypass(Firefox only)

Note: To reproduce this bug, `enableSvg` option is needed if the AngularJS version is 1.5+.