- From: Scott González <scott.gonzalez@gmail.com>
- Date: Fri, 6 Sep 2013 08:21:24 -0400
- To: Simon Pieters <simonp@opera.com>
- Cc: WHATWG <whatwg@lists.whatwg.org>, Boris Zbarsky <bzbarsky@mit.edu>
On Fri, Sep 6, 2013 at 8:20 AM, Simon Pieters <simonp@opera.com> wrote: > So the use case is getting an element by id with an "untrusted" id as > input, in an element or document fragment as opposed to the document? > Yes. Take the example of finding the input associated with a label: <label for="foo">foo</label> <input id="foo"> If you have a reference to the label and you want to find the input, you need to escape the value of the for attribute before querying.
Received on Friday, 6 September 2013 12:21:48 UTC