test(platform-browser): fix mXSS attack test in Canary (#18809)

PR Close #18809

packages/platform-browser/test/security/html_sanitizer_spec.ts

@@ -136,8 +136,9 @@ export function main() {
 
     if (browserDetection.isWebkit) {
       it('should prevent mXSS attacks', function() {
+        // In Chrome Canary 62, the ideographic space character is kept as a stringified HTML entity
         expect(sanitizeHtml(defaultDoc, '<a href="&#x3000;javascript:alert(1)">CLICKME</a>'))
-            .toEqual('<a href="unsafe:javascript:alert(1)">CLICKME</a>');
+            .toMatch(/<a href="unsafe:(&#12288;)?javascript:alert\(1\)">CLICKME<\/a>/);
       });
     }
   });