I just looked into the code but couldn't identify the crucial part.

I'll try to look into it again after GPW.

but some casual testing showed that already <input> without $1 is causing the problem, while something like <textarea> seems safe.

edit

My guess is that <input> used to be an accepted tag in the beginning and was later excluded, but somehow one whitelist was forgotten.