Is there any reason for excluding controls attribute on audio element from whitelist?

[dotneet]

I can't find the vulnerability on controls attribute.
any reason for excluding it from whitelist?

[flavorjones]

Noting here for posterity that this would be addressed by #155 if we used DOMPurify's allowlists.

[flavorjones]

(Assuming you mean the SVG audio element?)