Code used before fuzz:
var element=document.createElement('img'),document.appendChild(element),S={};function w(a,b,c,d,e,f,g){return{acceptsBooleans:b===2||b===3||b===4,attributeName:a,attributeNamespace:e,mustUseProperty:c,propertyName:d,type:b,sanitizeURL:f,removeEmptyString:g}}["src","href","action","formAction"].forEach(function(e){S[e]=w(e,1,false,e.toLowerCase(),null,true,true)});function sanitizeAttribute(a,b,c){var d=S[b];d&&d.sanitizeURL?/^(https?|ftp|mailto|data):/.test(c)?a.setAttribute(b,c):console.log(`Blocked: ${c}`):a.setAttribute(b,c)}sanitizeAttribute('src','$[chr]><iframe><!--');
