Ipc Labs

When the `ALLOW INSECURE RAW TEXT` setting is enabled, the sanitizer fails to recognize closing tags containing whitespace variants, such as `</stylet>`. Because browsers interpret these as valid end tags, subsequent content can escape the sanitization process, enabling a bypass of the cross-site scripting prevention mechanism.

Parsing arbitrary HTML can consume excessive CPU time, which may lead to a denial of service (a condition where a system becomes unavailable to its intended users).