On Fri, 06 Sep 2013 14:21:24 +0200, Scott González
<[email protected]> wrote:
On Fri, Sep 6, 2013 at 8:20 AM, Simon Pieters <[email protected]> wrote:
So the use case is getting an element by id with an "untrusted" id as
input, in an element or document fragment as opposed to the document?
Yes. Take the example of finding the input associated with a label:
<label for="foo">foo</label>
<input id="foo">
If you have a reference to the label and you want to find the input, you
need to escape the value of the for attribute before querying.
In this example, are the elements in the document?
--
Simon Pieters
Opera Software
