CVE-2016-10707: Denial of Service in jquery

The vulnerability stems from jQuery's attribute handling logic where boolean attribute getters would recursively call themselves when given mixed-case names. The commit diff shows the fix involved adding proper lowercasing before checking attribute handlers (jQuery.attrHandle). The vulnerable code path in attr.js would check for attribute handlers using the original case rather than lowercased names, creating a loop when handling boolean attributes like 'requiRed' due to case-sensitive handler lookups.