Fix attribute whitelisting

False-y values are still there.
Add spec
Merge pull request #2616 from jaymzh/whitelist

Fix attribute whitelisting