Currently the sanitizer uses horrible regexp which I have no reason to believe correct whatsoever to parse CSS. We should move to a CSS parser, likehttps://github.com/SimonSapin/tinycss/.