On Fri, Sep 6, 2013 at 8:20 AM, Simon Pieters <sim...@opera.com> wrote:
> So the use case is getting an element by id with an "untrusted" id as > input, in an element or document fragment as opposed to the document? > Yes. Take the example of finding the input associated with a label: <label for="foo">foo</label> <input id="foo"> If you have a reference to the label and you want to find the input, you need to escape the value of the for attribute before querying.