This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.
Specification: http://www.whatwg.org/specs/web-apps/current-work/multipage/the-end.html Multipage: http://www.whatwg.org/C#serializing-html-fragments Complete: http://www.whatwg.org/c#serializing-html-fragments Referrer: http://domparsing.spec.whatwg.org/ Comment: innerHTML for comments need to escape data too Posted from: 2620:0:1003:1017:2e41:38ff:fea6:f2aa User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.22 Safari/537.36
Seems like browser do not escape the content after all.