AIKIDO-2026-10709

TL;DR

When ADD_ATTR is configured as a function predicate, the implementation treated a matching predicate result as its own early branch inside _isValidAttribute, so the control flow never reached the URI checks that normally run for URL-bearing attributes such as href after name approval. Applications that use the predicate to allow those attributes could therefore keep disallowed URI schemes in output that still passes sanitization, enabling DOM-based cross-site scripting when the injected markup is activated. The update folds predicate-based permission into the same name-permitted condition used with built-in allowlists so subsequent URI scheme validation always applies to those attributes.