Style attribute on anchor tag throws an exception instead of error about js-xss HOT 5 CLOSED

var xss = require('xss')

var html = "<a href='https://foo.bar/' style='color: #0095dd; text-decoration: none;'>Whatever text</a>"

var options = {
  whiteList: {
    a: ['href', 'style']
  },
  onTagAttr: function (tag, name, value, isWhiteAttr) {
    if (isWhiteAttr && xss.safeAttrValue(tag, name, value) === '') {
      console.log('INVALID VALUE FOR ATTRIBUTE <%s %s="%s">', tag, name, value)
      return ''
    }
  }
}

var myxss = new xss.FilterXSS(options)
console.log(myxss.process(html))

xss.safeAttrValue(tag, name, value, myxss.cssFilter)

var options = {
  whiteList: {
    a: ['href', 'style']
  },
  onTagAttr: function (tag, name, value, isWhiteAttr) {
    var attrValue = xss.safeAttrValue(tag, name, value, myxss.cssFilter)
    if (isWhiteAttr && value === '') {
      console.log('INVALID VALUE FOR ATTRIBUTE <%s %s="%s">', tag, name, value)
      return ''
    }
  },
  css: {
    whiteList: {
      'color': true,
      'text-decoration': true
    }
  }
}

var FilterCSS = require('cssfilter').FilterCSS;

...

function safeAttrValue (tag, name, value, cssFilter) {
  cssFilter = cssFilter || new FilterCSS();

  // 转换为友好的属性值，再做判断
  value = friendlyAttrValue(value);