[whatwg] Parsing: < in unquoted attribute values

[Anne van Kesteren]

On Thu, 26 Apr 2007 02:17:12 +0200, Jonas Sicking <jonas at sicking.cc> wrote:
> We do no longer support this in mozilla (if we ever did). A reason we  
> now explicitly forbid this is we don't want it to ever be possible to  
> create elements with 'illegal' names. Same thing goes for attribute  
> names. This is partially for security reasons since some elements and  
> attributes carry very important security information.

Could you elaborate on the security issues? Could you also give a  
definition of "illegal names" as it's not really clear to me what that  
means for HTML.


> I fully agree with Simons original proposal though.


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>