On Fri, 06 Sep 2013 13:22:34 +0200, Anne van Kesteren <ann...@annevk.nl> wrote:

On Fri, Sep 6, 2013 at 2:50 AM, Boris Zbarsky <bzbar...@mit.edu> wrote:
In that case I think we need to add a function to the platform that
CSS-escapes a string.

Maybe a thing for window.CSS? Simon?

Such a function already exists in the wild btw: http://mothereff.in/css-escapes

So the use case is getting an element by id with an "untrusted" id as input, in an element or document fragment as opposed to the document?

--
Simon Pieters
Opera Software

Reply via email to