On Fri, 06 Sep 2013 16:42:47 +0200, Boris Zbarsky <bzbar...@mit.edu> wrote:

On 9/6/13 8:20 AM, Simon Pieters wrote:
So the use case is getting an element by id with an "untrusted" id as
input, in an element or document fragment as opposed to the document?

Or getting elements by tag name in a document fragment, for that matter (though "weird" chars in tag names are harder to produce; largely limited to leading digits).

Leading digits in tag names is not possible. Valid tag names in HTML/SVG/MathML all use non-weird chars.

--
Simon Pieters
Opera Software

Reply via email to