blacklist problematic DOM property names

fixes https://github.com/Polymer/platform/issues/88

Thoughts @sjmiles @sorvell ?

`for...in` is very expensive, we have gone to great lengths to avoid this type of iteration where possible. When/if we do need to do it, we try to do it only one time. So, look for (a) an array-form of these names that is already being generated, or (b) another place where the names are iterated onto which we can piggy back this test.