We end up with a duplicate dir attribute in the built-in safe default configuration "attributes" list. This is caused by having both a MathML and HTML global dir attribute in safe-default-configuration.txt. (These attributes are both in the null namespace, so they are completely indistinguishable in context of the Sanitizer API)