[whatwg] input element's value should not be sanitized during parsing

Mounir Lamouri mounir.lamouri at gmail.com
Tue Sep 21 13:30:40 PDT 2010


On 09/21/2010 10:18 PM, Jonas Sicking wrote:
> On Tue, Sep 21, 2010 at 9:13 AM, Boris Zbarsky <bzbarsky at mit.edu> wrote:
> Also, it would mean that the following two pieces of code behaves differently:
> 
> inp = document.createElement("input");
> inp.setAttribute("value", "foo\nbar");
> inp.setAttribute("type", "hidden");
> 
> and
> 
> inp = document.createElement("input");
> inp.setAttribute("type", "hidden");inp.setAttribute("value", "foo\nbar");
> This does not seem desirable.

They do. And I don't see this can be different.

--
Mounir



More information about the whatwg mailing list