LGTM https://codereview.appspot.com/13683045/diff/1/src/com/google/caja/plugin/Css... File src/com/google/caja/plugin/CssRewriter.java (right): https://codereview.appspot.com/13683045/diff/1/src/com/google/caja/plugin/Css... src/com/google/caja/plugin/CssRewriter.java:603: private static final TypesafeSet<Name> ALLOWED_PSEUDO_CLASSES = Suggest citing the reference this list was constructed from. https://codereview.appspot.com/13683045/diff/1/src/com/google/caja/plugin/san... File src/com/google/caja/plugin/sanitizecss.js (right): https://codereview.appspot.com/13683045/diff/1/src/com/google/caja/plugin/san... src/com/google/caja/plugin/sanitizecss.js:366: // See also ALLOWED_PSEUDO_CLASSES in CssRewriter.java Ditto. Also explicitly say it's duplicated rather than just "see also". Since the Java code is hopefully going away in the future, this JS code should have at least as much commentary as the Java code.
@r5598