Disallow setting invalid values for registered properties via CSSOM

third_party/WebKit/Source/core/editing/commands/RemoveCSSPropertyCommand.cpp

 /*
  * Copyright (C) 2005, 2008 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 39 matching lines @@
   if (!style)
     return;
 
   m_oldValue = style->getPropertyValue(m_property);
   m_important = style->propertyIsImportant(m_property);
 
   // Mutate using the CSSOM wrapper so we get the same event behavior as a
   // script. Setting to null string removes the property. We don't have internal
   // version of removeProperty.
   m_element->style()->setPropertyInternal(m_property, String(), String(), false,
-                                          IGNORE_EXCEPTION);
+                                          nullptr, IGNORE_EXCEPTION);
 }
 
 void RemoveCSSPropertyCommand::doUnapply() {
-  m_element->style()->setPropertyInternal(m_property, String(), m_oldValue,
-                                          m_important, IGNORE_EXCEPTION);
+  m_element->style()->setPropertyInternal(
+      m_property, String(), m_oldValue, m_important, nullptr, IGNORE_EXCEPTION);
 }
 
 DEFINE_TRACE(RemoveCSSPropertyCommand) {
   visitor->trace(m_element);
   SimpleEditCommand::trace(visitor);
 }
 
 }  // namespace blink