Fixed a bypass in attr()
Thanks @avlidienbrunn
Merge branch 'master' of github.com:cure53/jPurify