pub fn normalize_untrusted_str(s: &str) -> String
Normalize the string to avoid any unicode control characters.
This is important for untrusted input, as it can contain invalid unicode sequences.