function hasJavaScriptProtocol(attr) {
  return attr.value && attr.value.type === 'Literal'
    && isJavaScriptProtocol.test(attr.value.value);
}
@fileoverview Prevent usage of `javascript:` URLs
@author Sergei Startsev