XSS in importCSS #12
Description
Prepared stylesheet link may contain malicious href that must be properly escaped before writing it to the DOM.
Reproducer: http://jsfiddle.net/x3stw1nh/4/
<html>
<head>
<link type='text/css' rel='stylesheet' href='about:blank'/><script>alert('xss');</script><br' />
<script>
$("body").jqprint();
</script>
</head>
<body>
test
</body>
</html>