diff --git a/lib/htmlelts.js b/lib/htmlelts.js
index 716fe25..b4ff0ad 100644
--- a/lib/htmlelts.js
+++ b/lib/htmlelts.js
@@ -50,6 +50,11 @@ function CORS(attr) {
   };
 }
 
+var REFERRER = {
+  type: ["", "no-referrer", "no-referrer-when-downgrade", "same-origin", "origin", "strict-origin", "origin-when-cross-origin", "strict-origin-when-cross-origin", "unsafe-url"],
+  missing: '',
+};
+
 
 // XXX: the default value for tabIndex should be 0 if the element is
 // focusable and -1 if it is not.  But the full definition of focusable
@@ -227,6 +232,7 @@ define({
     media: String,
     hreflang: String,
     type: String,
+    referrerPolicy: REFERRER,
     // Obsolete
     coords: String,
     charset: String,
@@ -255,6 +261,7 @@ define({
     coords: String,
     ping: String,
     // XXX: also reflect relList
+    referrerPolicy: REFERRER,
     // Obsolete
     noHref: Boolean,
   }
@@ -494,7 +501,9 @@ define({
     // XXX: sandbox is a reflected settable token list
     seamless: Boolean,
     allowFullscreen: Boolean,
-    referrerPolicy: String,
+    allowUserMedia: Boolean,
+    allowPaymentRequest: Boolean,
+    referrerPolicy: REFERRER,
     // Obsolete
     align: String,
     scrolling: String,
@@ -519,6 +528,7 @@ define({
     isMap: Boolean,
     height: { type: "unsigned long", default: 0 },
     width: { type: "unsigned long", default: 0 },
+    referrerPolicy: REFERRER,
     // Obsolete:
     name: String,
     lowsrc: URL,
@@ -652,6 +662,9 @@ define({
     hreflang: String,
     type: String,
     crossOrigin: CORS,
+    nonce: String,
+    integrity: String,
+    referrerPolicy: REFERRER,
     // Obsolete
     charset: String,
     rev: String,
@@ -914,6 +927,8 @@ define({
     defer: Boolean,
     async: Boolean,
     crossOrigin: CORS,
+    nonce: String,
+    integrity: String,
   }
 });
 
diff --git a/test/web-platform-tests b/test/web-platform-tests
index e9cc2ce..405394a 160000
--- a/test/web-platform-tests
+++ b/test/web-platform-tests
@@ -1 +1 @@
-Subproject commit e9cc2ce904a4e5d93b3897591f9e8e6e6bf6b473
+Subproject commit 405394a4231c7f8913ef103c05af6cf0a0788063
diff --git a/test/web-platform-tests.js b/test/web-platform-tests.js
index 18b208a..3f40673 100644
--- a/test/web-platform-tests.js
+++ b/test/web-platform-tests.js
@@ -11,6 +11,7 @@ var blacklist = [
   'interfaces',
   'reflection-obsolete',
   'documents dom-tree-accessors Document.body',
+  'documents dom-tree-accessors Document.currentScript',
   'documents dom-tree-accessors Document.currentScript.sub',
   'documents dom-tree-accessors document.embeds-document.plugins-01',
   'documents dom-tree-accessors document.forms',