Disallow setting invalid values for registered properties via CSSOM

third_party/WebKit/Source/core/css/DOMWindowCSS.cpp

 /*
  * Copyright (C) 2012 Motorola Mobility Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above
@@ skipping 28 matching lines @@
 namespace blink {
 
 bool DOMWindowCSS::supports(const String& property, const String& value) {
   CSSPropertyID unresolvedProperty = unresolvedCSSPropertyID(property);
   if (unresolvedProperty == CSSPropertyInvalid)
     return false;
   if (unresolvedProperty == CSSPropertyVariable) {
     MutableStylePropertySet* dummyStyle =
         MutableStylePropertySet::create(HTMLStandardMode);
     bool isAnimationTainted = false;
-    return CSSParser::parseValueForCustomProperty(
-               dummyStyle, "--valid", value, false, nullptr, isAnimationTainted)
+    return CSSParser::parseValueForCustomProperty(dummyStyle, "--valid",
+                                                  nullptr, value, false,
+                                                  nullptr, isAnimationTainted)
         .didParse;
   }
 
   ASSERT(CSSPropertyMetadata::isEnabledProperty(unresolvedProperty));
 
   // This will return false when !important is present
   MutableStylePropertySet* dummyStyle =
       MutableStylePropertySet::create(HTMLStandardMode);
   return CSSParser::parseValue(dummyStyle, unresolvedProperty, value, false, 0)
       .didParse;
 }
 
 bool DOMWindowCSS::supports(const String& conditionText) {
   return CSSParser::parseSupportsCondition(conditionText);
 }
 
 String DOMWindowCSS::escape(const String& ident) {
   StringBuilder builder;
   serializeIdentifier(ident, builder);
   return builder.toString();
 }
 
 }  // namespace blink