what's the argument against allowing
<div id="!...@#$=()[]{}">
or other weird chars.
it doesn't conform to xml or html specs,
but it's not rejected by any browser I tried,
and I can't think of any particular
security implication of weird chars.

Reply via email to