On 9/6/13 8:20 AM, Simon Pieters wrote:
So the use case is getting an element by id with an "untrusted" id as input, in an element or document fragment as opposed to the document?
Or getting elements by tag name in a document fragment, for that matter (though "weird" chars in tag names are harder to produce; largely limited to leading digits).
-Boris
