On Fri, 06 Sep 2013 13:22:34 +0200, Anne van Kesteren <[email protected]>
wrote:
On Fri, Sep 6, 2013 at 2:50 AM, Boris Zbarsky <[email protected]> wrote:
In that case I think we need to add a function to the platform that
CSS-escapes a string.
Maybe a thing for window.CSS? Simon?
Such a function already exists in the wild btw:
http://mothereff.in/css-escapes
So the use case is getting an element by id with an "untrusted" id as
input, in an element or document fragment as opposed to the document?
--
Simon Pieters
Opera Software
