- From: Simon Pieters <simonp@opera.com>
- Date: Fri, 06 Sep 2013 14:40:00 +0200
- To: Scott González <scott.gonzalez@gmail.com>
- Cc: WHATWG <whatwg@lists.whatwg.org>, Boris Zbarsky <bzbarsky@mit.edu>
On Fri, 06 Sep 2013 14:21:24 +0200, Scott González <scott.gonzalez@gmail.com> wrote: > On Fri, Sep 6, 2013 at 8:20 AM, Simon Pieters <simonp@opera.com> wrote: > >> So the use case is getting an element by id with an "untrusted" id as >> input, in an element or document fragment as opposed to the document? >> > > Yes. Take the example of finding the input associated with a label: > > <label for="foo">foo</label> > <input id="foo"> > > If you have a reference to the label and you want to find the input, you > need to escape the value of the for attribute before querying. In this example, are the elements in the document? -- Simon Pieters Opera Software
Received on Friday, 6 September 2013 12:33:30 UTC