mozilla/thimble.webmaker.org — pull request #430 by Pomax (2014-06-02 23:00:24+00:00)
Title: added a flag to disallow active content in attributes

predicated on `on...` attribute names.