Disallow setting invalid values for registered properties via CSSOM

third_party/WebKit/Source/core/animation/StringKeyframe.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/animation/StringKeyframe.h"
 
 #include "core/StylePropertyShorthand.h"
 #include "core/animation/css/CSSAnimations.h"
 #include "core/css/CSSCustomPropertyDeclaration.h"
 #include "core/css/CSSPropertyMetadata.h"
 #include "core/css/resolver/StyleResolver.h"
 #include "core/style/ComputedStyle.h"
 #include "core/svg/SVGElement.h"
 #include "platform/RuntimeEnabledFeatures.h"
 
 namespace blink {
 
 StringKeyframe::StringKeyframe(const StringKeyframe& copyFrom)
     : Keyframe(copyFrom.m_offset, copyFrom.m_composite, copyFrom.m_easing),
       m_cssPropertyMap(copyFrom.m_cssPropertyMap->mutableCopy()),
       m_presentationAttributeMap(
           copyFrom.m_presentationAttributeMap->mutableCopy()),
       m_svgAttributeMap(copyFrom.m_svgAttributeMap) {}
 
 MutableStylePropertySet::SetResult StringKeyframe::setCSSPropertyValue(
     const AtomicString& propertyName,
+    const PropertyRegistry* registry,
     const String& value,
     StyleSheetContents* styleSheetContents) {
   bool isAnimationTainted = true;
-  return m_cssPropertyMap->setProperty(propertyName, value, false,
+  return m_cssPropertyMap->setProperty(propertyName, registry, value, false,
                                        styleSheetContents, isAnimationTainted);
 }
 
 MutableStylePropertySet::SetResult StringKeyframe::setCSSPropertyValue(
     CSSPropertyID property,
     const String& value,
     StyleSheetContents* styleSheetContents) {
   DCHECK_NE(property, CSSPropertyInvalid);
   if (CSSAnimations::isAnimationAffectingProperty(property)) {
     bool didParse = true;
@@ skipping 107 matching lines @@
 }
 
 PassRefPtr<Keyframe::PropertySpecificKeyframe>
 SVGPropertySpecificKeyframe::neutralKeyframe(
     double offset,
     PassRefPtr<TimingFunction> easing) const {
   return create(offset, std::move(easing), String(), EffectModel::CompositeAdd);
 }
 
 }  // namespace blink