http://codereview.appspot.com/98088/diff/1/2
File src/com/google/caja/plugin/domita.js (right):
http://codereview.appspot.com/98088/diff/1/2#newcode1056
Line 1056: } else if (ancestor === document.body) {
Instead of using document, please use node.ownerDocument.documentElement
instead of document.body since this will currently allow access to the
head, title, and other elements in the document outside the body.
Maybe use contains/compareDocumentPosition to check whether the node is
contained.
http://codereview.appspot.com/98088
