Also... unless I'm wrong in the reading of the spec, data-uri href values would be allowed, which means an attacker could just use that to inject a full documen

Also... unless I'm wrong in the reading of the spec, data-uri href values would be allowed, which means an attacker could just use that to inject a full document that isn't sanitised.