Doctype html error

Living Standard — Last Updated 6 February 2023

1. 1. 13.2 Parsing HTML documents
      1. 13.2.1 Overview of the parsing model
      2. 13.2.2 Parse errors
      3. 13.2.3 The input byte stream
         1. 13.2.3.1 Parsing with a known character encoding
         2. 13.2.3.2 Determining the character encoding
         3. 13.2.3.3 Character encodings
         4. 13.2.3.4 Changing the encoding while parsing
         5. 13.2.3.5 Preprocessing the input stream
      4. 13.2.4 Parse state
         1. 13.2.4.1 The insertion mode
         2. 13.2.4.2 The stack of open elements
         3. 13.2.4.3 The list of active formatting elements
         4. 13.2.4.4 The element pointers
         5. 13.2.4.5 Other parsing state flags
      5. 13.2.5 Tokenization
         1. 13.2.5.1 Data state
         2. 13.2.5.2 RCDATA state
         3. 13.2.5.3 RAWTEXT state
         4. 13.2.5.4 Script data state
         5. 13.2.5.5 PLAINTEXT state
         6. 13.2.5.6 Tag open state
         7. 13.2.5.7 End tag open state
         8. 13.2.5.8 Tag name state
         9. 13.2.5.9 RCDATA less-than sign state
         10. 13.2.5.10 RCDATA end tag open state
         11. 13.2.5.11 RCDATA end tag name state
         12. 13.2.5.12 RAWTEXT less-than sign state
         13. 13.2.5.13 RAWTEXT end tag open state
         14. 13.2.5.14 RAWTEXT end tag name state
         15. 13.2.5.15 Script data less-than sign state
         16. 13.2.5.16 Script data end tag open state
         17. 13.2.5.17 Script data end tag name state
         18. 13.2.5.18 Script data escape start state
         19. 13.2.5.19 Script data escape start dash state
         20. 13.2.5.20 Script data escaped state
         21. 13.2.5.21 Script data escaped dash state
         22. 13.2.5.22 Script data escaped dash dash state
         23. 13.2.5.23 Script data escaped less-than sign state
         24. 13.2.5.24 Script data escaped end tag open state
         25. 13.2.5.25 Script data escaped end tag name state
         26. 13.2.5.26 Script data double escape start state
         27. 13.2.5.27 Script data double escaped state
         28. 13.2.5.28 Script data double escaped dash state
         29. 13.2.5.29 Script data double escaped dash dash state
         30. 13.2.5.30 Script data double escaped less-than sign state
         31. 13.2.5.31 Script data double escape end state
         32. 13.2.5.32 Before attribute name state
         33. 13.2.5.33 Attribute name state
         34. 13.2.5.34 After attribute name state
         35. 13.2.5.35 Before attribute value state
         36. 13.2.5.36 Attribute value (double-quoted) state
         37. 13.2.5.37 Attribute value (single-quoted) state
         38. 13.2.5.38 Attribute value (unquoted) state
         39. 13.2.5.39 After attribute value (quoted) state
         40. 13.2.5.40 Self-closing start tag state
         41. 13.2.5.41 Bogus comment state
         42. 13.2.5.42 Markup declaration open state
         43. 13.2.5.43 Comment start state
         44. 13.2.5.44 Comment start dash state
         45. 13.2.5.45 Comment state
         46. 13.2.5.46 Comment less-than sign state
         47. 13.2.5.47 Comment less-than sign bang state
         48. 13.2.5.48 Comment less-than sign bang dash state
         49. 13.2.5.49 Comment less-than sign bang dash dash state
         50. 13.2.5.50 Comment end dash state
         51. 13.2.5.51 Comment end state
         52. 13.2.5.52 Comment end bang state
         53. 13.2.5.53 DOCTYPE state
         54. 13.2.5.54 Before DOCTYPE name state
         55. 13.2.5.55 DOCTYPE name state
         56. 13.2.5.56 After DOCTYPE name state
         57. 13.2.5.57 After DOCTYPE public keyword state
         58. 13.2.5.58 Before DOCTYPE public identifier state
         59. 13.2.5.59 DOCTYPE public identifier (double-quoted) state
         60. 13.2.5.60 DOCTYPE public identifier (single-quoted) state
         61. 13.2.5.61 After DOCTYPE public identifier state
         62. 13.2.5.62 Between DOCTYPE public and system identifiers state
         63. 13.2.5.63 After DOCTYPE system keyword state
         64. 13.2.5.64 Before DOCTYPE system identifier state
         65. 13.2.5.65 DOCTYPE system identifier (double-quoted) state
         66. 13.2.5.66 DOCTYPE system identifier (single-quoted) state
         67. 13.2.5.67 After DOCTYPE system identifier state
         68. 13.2.5.68 Bogus DOCTYPE state
         69. 13.2.5.69 CDATA section state
         70. 13.2.5.70 CDATA section bracket state
         71. 13.2.5.71 CDATA section end state
         72. 13.2.5.72 Character reference state
         73. 13.2.5.73 Named character reference state
         74. 13.2.5.74 Ambiguous ampersand state
         75. 13.2.5.75 Numeric character reference state
         76. 13.2.5.76 Hexadecimal character reference start state
         77. 13.2.5.77 Decimal character reference start state
         78. 13.2.5.78 Hexadecimal character reference state
         79. 13.2.5.79 Decimal character reference state
         80. 13.2.5.80 Numeric character reference end state
      6. 13.2.6 Tree construction
         1. 13.2.6.1 Creating and inserting nodes
         2. 13.2.6.2 Parsing elements that contain only text
         3. 13.2.6.3 Closing elements that have implied end tags
         4. 13.2.6.4 The rules for parsing tokens in HTML content
            1. 13.2.6.4.1 The «initial» insertion mode
            2. 13.2.6.4.2 The «before html» insertion mode
            3. 13.2.6.4.3 The «before head» insertion mode
            4. 13.2.6.4.4 The «in head» insertion mode
            5. 13.2.6.4.5 The «in head noscript» insertion mode
            6. 13.2.6.4.6 The «after head» insertion mode
            7. 13.2.6.4.7 The «in body» insertion mode
            8. 13.2.6.4.8 The «text» insertion mode
            9. 13.2.6.4.9 The «in table» insertion mode
            10. 13.2.6.4.10 The «in table text» insertion mode
            11. 13.2.6.4.11 The «in caption» insertion mode
            12. 13.2.6.4.12 The «in column group» insertion mode
            13. 13.2.6.4.13 The «in table body» insertion mode
            14. 13.2.6.4.14 The «in row» insertion mode
            15. 13.2.6.4.15 The «in cell» insertion mode
            16. 13.2.6.4.16 The «in select» insertion mode
            17. 13.2.6.4.17 The «in select in table» insertion mode
            18. 13.2.6.4.18 The «in template» insertion mode
            19. 13.2.6.4.19 The «after body» insertion mode
            20. 13.2.6.4.20 The «in frameset» insertion mode
            21. 13.2.6.4.21 The «after frameset» insertion mode
            22. 13.2.6.4.22 The «after after body» insertion mode
            23. 13.2.6.4.23 The «after after frameset» insertion mode
         5. 13.2.6.5 The rules for parsing tokens in foreign content
      7. 13.2.7 The end
      8. 13.2.8 Speculative HTML parsing
      9. 13.2.9 Coercing an HTML DOM into an infoset
      10. 13.2.10 An introduction to error handling and strange cases in the parser
          1. 13.2.10.1 Misnested tags: <b><i></b></i>
          2. 13.2.10.2 Misnested tags: <b><p></b></p>
          3. 13.2.10.3 Unexpected markup in tables
          4. 13.2.10.4 Scripts that modify the page as it is being parsed
          5. 13.2.10.5 The execution of scripts that are moving across multiple documents
          6. 13.2.10.6 Unclosed formatting elements
   2. 13.3 Serializing HTML fragments
   3. 13.4 Parsing HTML fragments

13.2 Parsing HTML documents

This section only applies to user agents, data mining tools, and conformance
checkers.

The rules for parsing XML documents into DOM trees are covered by the next
section, entitled «The XML syntax».

User agents must use the parsing rules described in this section to generate the DOM trees from
text/html resources. Together, these rules define what is referred to as the
HTML parser.

For the purposes of conformance checkers, if a resource is determined to be in the HTML
syntax, then it is an HTML document.

As stated in the terminology section,
references to element types that do not explicitly specify a
namespace always refer to elements in the HTML namespace. For example, if the spec
talks about «a element», then that is an element with the local name «menu«, the namespace «http://www.w3.org/1999/xhtml«, and
the interface . Where possible, references to such elements are
hyperlinked to their definition.

13.2.1 Overview of the parsing model

The input to the HTML parsing process consists of a stream of code
points, which is passed through a tokenization stage followed by a tree
construction stage. The output is a Document object.

Implementations that do not support scripting do not
have to actually create a DOM Document object, but the DOM tree in such cases is
still used as the model for the rest of the specification.

In the common case, the data handled by the tokenization stage comes from the network, but
it can also come from script running in the user
agent, e.g. using the document.write() API.

There is only one set of states for the tokenizer stage and the tree
construction stage, but the tree construction stage is reentrant, meaning that while the tree
construction stage is handling one token, the tokenizer might be resumed, causing further tokens
to be emitted and processed before the first token’s processing is complete.

...
<script>
 document.write('<p>');
</script>
...

To handle these cases, parsers have a script nesting level, which must be initially
set to zero, and a parser pause flag, which must be initially set to false.

13.2.2 Parse errors

This specification defines the parsing rules for HTML documents, whether they are syntactically
correct or not. Certain points in the parsing algorithm are said to be parse errors. The error handling for parse errors is well-defined (that’s the
processing rules described throughout this specification), but user agents, while parsing an HTML
document, may abort the parser at the first parse
error that they encounter for which they do not wish to apply the rules described in this
specification.

Conformance checkers must report at least one parse error condition to the user if one or more
parse error conditions exist in the document and must not report parse error conditions if none
exist in the document. Conformance checkers may report more than one parse error condition if more
than one parse error condition exists in the document.

Parse errors are only errors with the syntax of HTML. In addition to
checking for parse errors, conformance checkers will also verify that the document obeys all the
other conformance requirements described in this specification.

Some parse errors have dedicated codes outlined in the table below that should be used by
conformance checkers in reports.

Error descriptions in the table below are non-normative.

<42></42>

<div/><span></span><span></span>

<div foo<div>

<div id'bar'>

<div foo=b'ar'>

<div foo="bar" ="baz">

<?xml-stylesheet type="text/css" href="style.css"?>

13.2.3 The input byte stream

The stream of code points that comprises the input to the tokenization stage will be initially
seen by the user agent as a stream of bytes (typically coming over the network or from the local
file system). The bytes encode the actual characters according to a particular character
encoding, which the user agent uses to decode the bytes into characters.

For XML documents, the algorithm user agents are required to use to determine the
character encoding is given by XML. This section does not apply to XML
documents. [XML]

Usually, the encoding sniffing algorithm defined below is used to determine the
character encoding.

Given a character encoding, the bytes in the input byte stream must be converted
to characters for the tokenizer’s input stream, by passing the input byte
stream and character encoding to decode.

A leading Byte Order Mark (BOM) causes the character encoding argument to be
ignored and will itself be skipped.

Bytes or sequences of bytes in the original byte stream that did not conform to
the Encoding standard (e.g. invalid UTF-8 byte sequences in a UTF-8 input byte stream) are errors
that conformance checkers are expected to report. [ENCODING]

The decoder algorithms describe how to handle invalid input; for security
reasons, it is imperative that those rules be followed precisely. Differences in how invalid byte
sequences are handled can result in, amongst other problems, script injection vulnerabilities
(«XSS»).

When the HTML parser is decoding an input byte stream, it uses a character encoding and a confidence. The confidence is either tentative,
certain, or irrelevant. The encoding used, and whether the confidence in that
encoding is tentative or certain, is used
during the parsing to determine whether to change the encoding. If no encoding is
necessary, e.g. because the parser is operating on a Unicode stream and doesn’t have to use a
character encoding at all, then the confidence is
irrelevant.

Some algorithms feed the parser by directly adding characters to the input
stream rather than adding bytes to the input byte stream.

13.2.3.1 Parsing with a known character encoding

When the HTML parser is to operate on an input byte stream that has a known
definite encoding, then the character encoding is that encoding and the confidence is certain.

13.2.3.2 Determining the character encoding

In some cases, it might be impractical to unambiguously determine the encoding before parsing
the document. Because of this, this specification provides for a two-pass mechanism with an
optional pre-scan. Implementations are allowed, as described below, to apply a simplified parsing
algorithm to whatever bytes they have available before beginning to parse the document. Then, the
real parser is started, using a tentative encoding derived from this pre-parse and other
out-of-band metadata. If, while the document is being loaded, the user agent discovers a character
encoding declaration that conflicts with this information, then the parser can get reinvoked to
perform a parse of the document with the real encoding.

User agents must use the following algorithm, called the encoding
sniffing algorithm, to determine the character encoding to use when decoding a document in
the first pass. This algorithm takes as input any out-of-band metadata available to the user agent
(e.g. the Content-Type metadata of the document) and all the
bytes available so far, and returns a character encoding and a confidence that is either tentative or
certain.

1. If the result of BOM sniffing is an encoding, return that
   encoding with confidence certain.

   Although the decode algorithm will itself change the encoding to
   use based on the presence of a byte order mark, this algorithm sniffs the BOM as well in order
   to set the correct document’s character encoding and confidence.

2. If the user has explicitly instructed the user agent to override the document’s character
   encoding with a specific encoding, optionally return that encoding with the confidence certain.

   Typically, user agents remember such user requests across sessions, and in some
   cases apply them to documents in iframes as well.

3. The user agent may wait for more bytes of the resource to be available, either in this step
   or at any later step in this algorithm. For instance, a user agent might wait 500ms or 1024
   bytes, whichever came first. In general preparsing the source to find the encoding improves
   performance, as it reduces the need to throw away the data structures used when parsing upon
   finding the encoding information. However, if the user agent delays too long to obtain data to
   determine the encoding, then the cost of the delay could outweigh any performance improvements
   from the preparse.

   The authoring conformance requirements for character encoding declarations limit
   them to only appearing in the first 1024 bytes. User agents are
   therefore encouraged to use the prescan algorithm below (as invoked by these steps) on the first
   1024 bytes, but not to stall beyond that.

4. If the transport layer specifies a character encoding, and it is supported, return that
   encoding with the confidence certain.

5. Optionally prescan the byte
   stream to determine its encoding, with the end
   condition being when the user agent decides that scanning further bytes would not be
   efficient. User agents are encouraged to only prescan the first 1024 bytes. User agents may
   decide that scanning any bytes is not efficient, in which case these substeps are
   entirely skipped.

   The aforementioned algorithm returns either a character encoding or failure. If it returns a
   character encoding, then return the same encoding, with confidence tentative.

6. If the HTML parser for which this algorithm is being run is associated with a
   Document d whose container
   document is non-null, then:

   1. Let parentDocument be d‘s container document.

   2. If parentDocument‘s origin is
      same origin with d‘s origin and parentDocument‘s character encoding is not
      UTF-16BE/LE, then return parentDocument‘s character encoding, with the confidence tentative.

7. Otherwise, if the user agent has information on the likely encoding for this page, e.g.
   based on the encoding of the page when it was last visited, then return that encoding, with the
   confidence tentative.

8. The user agent may attempt to autodetect the character encoding from applying frequency
   analysis or other algorithms to the data stream. Such algorithms may use information about the
   resource other than the resource’s contents, including the address of the resource. If
   autodetection succeeds in determining a character encoding, and that encoding is a supported
   encoding, then return that encoding, with the confidence tentative.
   [UNIVCHARDET]

   User agents are generally discouraged from attempting to autodetect encodings
   for resources obtained over the network, since doing so involves inherently non-interoperable
   heuristics. Attempting to detect encodings based on an HTML document’s preamble is especially
   tricky since HTML markup typically uses only ASCII characters, and HTML documents tend to begin
   with a lot of markup rather than with text content.

   The UTF-8 encoding has a highly detectable bit pattern. Files from the local
   file system that contain bytes with values greater than 0x7F which match the UTF-8 pattern are
   very likely to be UTF-8, while documents with byte sequences that do not match it are very
   likely not. When a user agent can examine the whole file, rather than just the preamble,
   detecting for UTF-8 specifically can be especially effective. [PPUTF8] [UTF8DET]

9. Otherwise, return an implementation-defined or user-specified default character
   encoding, with the confidence
   tentative.

   In controlled environments or in environments where the encoding of documents can be
   prescribed (for example, for user agents intended for dedicated use in new networks), the
   comprehensive UTF-8 encoding is suggested.

   In other environments, the default encoding is typically dependent on the user’s locale (an
   approximation of the languages, and thus often encodings, of the pages that the user is likely
   to frequent). The following table gives suggested defaults based on the user’s locale, for
   compatibility with legacy content. Locales are identified by BCP 47 language tags. [BCP47] [ENCODING]

   Locale language	Suggested default encoding
   ar	Arabic	windows-1256
   az	Azeri	windows-1254
   ba	Bashkir	windows-1251
   be	Belarusian	windows-1251
   bg	Bulgarian	windows-1251
   cs	Czech	windows-1250
   el	Greek	ISO-8859-7
   et	Estonian	windows-1257
   fa	Persian	windows-1256
   he	Hebrew	windows-1255
   hr	Croatian	windows-1250
   hu	Hungarian	ISO-8859-2
   ja	Japanese	Shift_JIS
   kk	Kazakh	windows-1251
   ko	Korean	EUC-KR
   ku	Kurdish	windows-1254
   ky	Kyrgyz	windows-1251
   lt	Lithuanian	windows-1257
   lv	Latvian	windows-1257
   mk	Macedonian	windows-1251
   pl	Polish	ISO-8859-2
   ru	Russian	windows-1251
   sah	Yakut	windows-1251
   sk	Slovak	windows-1250
   sl	Slovenian	ISO-8859-2
   sr	Serbian	windows-1251
   tg	Tajik	windows-1251
   th	Thai	windows-874
   tr	Turkish	windows-1254
   tt	Tatar	windows-1251
   uk	Ukrainian	windows-1251
   vi	Vietnamese	windows-1258
   zh-Hans, zh-CN, zh-SG	Chinese, Simplified	GBK
   zh-Hant, zh-HK, zh-MO, zh-TW	Chinese, Traditional	Big5
   All other locales	windows-1252

   The contents of this table are derived from the intersection of
   Windows, Chrome, and Firefox defaults.

The document’s character encoding must immediately be set to the value returned
from this algorithm, at the same time as the user agent uses the returned value to select the
decoder to use for the input byte stream.

When an algorithm requires a user agent to prescan a byte stream to determine its
encoding, given some defined end condition, then it must run the following
steps. If at any point during these steps (including during instances of the get an attribute algorithm invoked by this
one) the user agent either runs out of bytes (meaning the position pointer created in
the first step below goes beyond the end of the byte stream obtained so far) or reaches its
end condition, then abort the prescan a byte stream to determine its
encoding algorithm and return the result get an XML encoding applied to the same
bytes that the prescan a byte stream to determine its encoding algorithm was applied
to. Otherwise, these steps will return a character encoding.

1. Let fallback encoding be null.

2. Let position be a pointer to a byte in the input byte stream, initially
   pointing at the first byte.

3. Prescan for UTF-16 XML declarations: If position points to:

   A sequence of bytes starting with: 0x3C, 0x0, 0x3F, 0x0, 0x78, 0x0 (case-sensitive UTF-16
   little-endian ‘<?x’)

   Return UTF-16LE.

   A sequence of bytes starting with: 0x0, 0x3C, 0x0, 0x3F, 0x0, 0x78 (case-sensitive UTF-16
   big-endian ‘<?x’)

   Return UTF-16BE.

   For historical reasons, the prefix is two bytes longer than in Appendix F of XML and the
   encoding name is not checked.

4. Loop: If position points to:

   A sequence of bytes starting with: 0x3C 0x21 0x2D 0x2D (`<!--`)

   Advance the position pointer so that it points at the first 0x3E byte
   which is preceded by two 0x2D bytes (i.e. at the end of an ASCII ‘—>’ sequence) and comes
   after the 0x3C byte that was found. (The two 0x2D bytes can be the same as those in the
   ‘<!—‘ sequence.)

   A sequence of bytes starting with: 0x3C, 0x4D or 0x6D, 0x45 or 0x65, 0x54 or 0x74, 0x41 or 0x61, and one of 0x09, 0x0A, 0x0C, 0x0D, 0x20, 0x2F (case-insensitive ASCII ‘<meta’ followed by a space or slash)

   1. Advance the position pointer so that it points at the next 0x09,
      0x0A, 0x0C, 0x0D, 0x20, or 0x2F byte (the one in sequence of characters matched
      above).

   2. Let attribute list be an empty list of strings.

   3. Let got pragma be false.

   4. Let need pragma be null.

   5. Let charset be the null value (which, for the purposes of this
      algorithm, is distinct from an unrecognized encoding or the empty string).

   6. Attributes: Get an
      attribute and its value. If no attribute was sniffed, then jump to the
      processing step below.

   7. If the attribute’s name is already in attribute list, then return
      to the step labeled attributes.

   8. Add the attribute’s name to attribute list.

   9. Run the appropriate step from the following list, if one applies:

      If the attribute’s name is «http-equiv«

      If the attribute’s value is «content-type«, then set got pragma to true.

      If the attribute’s name is «content«

      Apply the algorithm for extracting a character encoding from a
      meta element, giving the attribute’s value as the string to parse. If a
      character encoding is returned, and if charset is still set to null,
      let charset be the encoding returned, and set need
      pragma to true.

      If the attribute’s name is «charset«

      Let charset be the result of getting an encoding
      from the attribute’s value, and set need pragma to false.

   10. Return to the step labeled attributes.

   11. Processing: If need pragma is null, then jump to the step
       below labeled next byte.

   12. If need pragma is true but got pragma is
       false, then jump to the step below labeled next byte.

   13. If charset is failure, then jump to the step below labeled next
       byte.

   14. If charset is UTF-16BE/LE, then set charset to
       UTF-8.

   15. If charset is x-user-defined, then set charset to
       windows-1252.

   16. Return charset.

   A sequence of bytes starting with a 0x3C byte (<), optionally a 0x2F byte (/), and
   finally a byte in the range 0x41-0x5A or 0x61-0x7A (A-Z or a-z)

   1. Advance the position pointer so that it points at the next 0x09 (HT),
      0x0A (LF), 0x0C (FF), 0x0D (CR), 0x20 (SP), or 0x3E (>) byte.

   2. Repeatedly get an attribute
      until no further attributes can be found, then jump to the step below labeled next
      byte.

   A sequence of bytes starting with: 0x3C 0x21 (`<!`)

   A sequence of bytes starting with: 0x3C 0x2F (`</`)

   A sequence of bytes starting with: 0x3C 0x3F (`<?`)

   Advance the position pointer so that it points at the first 0x3E byte (>) that
   comes after the 0x3C byte that was found.

   Any other byte

   Do nothing with that byte.

5. Next byte: Move position so it points at the next byte in the
   input byte stream, and return to the step above labeled loop.

When the prescan a byte stream to determine its encoding algorithm says to get an attribute, it means doing this:

1. If the byte at position is one of 0x09 (HT), 0x0A (LF), 0x0C (FF), 0x0D (CR),
   0x20 (SP), or 0x2F (/) then advance position to the next byte and redo this
   step.

2. If the byte at position is 0x3E (>), then abort the get an attribute algorithm. There isn’t
   one.

3. Otherwise, the byte at position is the start of the attribute name.
   Let attribute name and attribute value be the empty
   string.

4. Process the byte at position as follows:

   If it is 0x3D (=), and the attribute name is longer than the empty string

   Advance position to the next byte and jump to the step below labeled
   value.

   If it is 0x09 (HT), 0x0A (LF), 0x0C (FF), 0x0D (CR), or 0x20 (SP)

   Jump to the step below labeled spaces.

   If it is 0x2F (/) or 0x3E (>)

   Abort the get an attribute
   algorithm. The attribute’s name is the value of attribute name, its value
   is the empty string.

   If it is in the range 0x41 (A) to 0x5A (Z)

   Append the code point b+0x20 to attribute name
   (where b is the value of the byte at position). (This converts the input
   to lowercase.)

   Anything else

   Append the code point with the same value as the byte at position to
   attribute name. (It doesn’t actually matter how bytes outside the ASCII range are
   handled here, since only ASCII bytes can contribute to the detection of a character
   encoding.)

5. Advance position to the next byte and return to the previous
   step.

6. Spaces: If the byte at position is one of 0x09 (HT), 0x0A (LF), 0x0C
   (FF), 0x0D (CR), or 0x20 (SP) then advance position to the next byte, then, repeat
   this step.

7. If the byte at position is not 0x3D (=), abort the get an attribute algorithm. The attribute’s
   name is the value of attribute name, its value is the empty string.

8. Advance position past the 0x3D (=) byte.

9. Value: If the byte at position is one of 0x09 (HT), 0x0A (LF), 0x0C
   (FF), 0x0D (CR), or 0x20 (SP) then advance position to the next byte, then, repeat
   this step.

10. Process the byte at position as follows:

    If it is 0x22 («) or 0x27 (‘)

    1. Let b be the value of the byte at position.
    2. Quote loop: Advance position to the next byte.
    3. If the value of the byte at position is the value of b, then advance position to the next byte and abort the
       «get an attribute» algorithm. The attribute’s name is the value of attribute
       name, and its value is the value of attribute value.
    4. Otherwise, if the value of the byte at position is in the range 0x41 (A) to
       0x5A (Z), then append a code point to attribute value whose value is 0x20 more
       than the value of the byte at position.
    5. Otherwise, append a code point to attribute value whose value is the same as
       the value of the byte at position.
    6. Return to the step above labeled quote loop.

    If it is 0x3E (>)

    Abort the get an attribute
    algorithm. The attribute’s name is the value of attribute name, its value
    is the empty string.

    If it is in the range 0x41 (A) to 0x5A (Z)

    Append a code point b+0x20 to attribute value
    (where b is the value of the byte at position). Advance
    position to the next byte.

    Anything else

    Append a code point with the same value as the byte at position to
    attribute value. Advance position to the next byte.

11. Process the byte at position as
    follows:

    If it is 0x09 (HT), 0x0A (LF), 0x0C (FF), 0x0D (CR), 0x20 (SP), or 0x3E (>)

    Abort the get an attribute
    algorithm. The attribute’s name is the value of attribute name and its
    value is the value of attribute value.

    If it is in the range 0x41 (A) to 0x5A (Z)

    Append a code point b+0x20 to attribute value
    (where b is the value of the byte at position).

    Anything else

    Append a code point with the same value as the byte at position to
    attribute value.

12. Advance position to the next byte and return to the previous
    step.

When the prescan a byte stream to determine its encoding algorithm is aborted
without returning an encoding, get an XML
encoding means doing this.

Looking for syntax resembling an XML declaration, even in text/html,
is necessary for compatibility with existing content.

1. Let encodingPosition be a pointer to the start of the stream.

2. If encodingPosition does not point to the start of a byte sequence 0x3C, 0x3F,
   0x78, 0x6D, 0x6C (`<?xml`), then return failure.

3. Let xmlDeclarationEnd be a pointer to the next byte in the input byte stream
   which is 0x3E (>). If there is no such byte, then return failure.

4. Set encodingPosition to the position of the first occurrence of the subsequence
   of bytes 0x65, 0x6E, 0x63, 0x6F, 0x64, 0x69, 0x6E, 0x67 (`encoding`) at or
   after the current encodingPosition. If there is no such sequence, then return
   failure.

5. Advance encodingPosition past the 0x67 (g) byte.

6. While the byte at encodingPosition is less than or equal to 0x20 (i.e., it is
   either an ASCII space or control character), advance encodingPosition to the next
   byte.

7. If the byte at encodingPosition is not 0x3D (=), then return failure.

8. Advance encodingPosition to the next byte.

9. While the byte at encodingPosition is less than or equal to 0x20 (i.e., it is
   either an ASCII space or control character), advance encodingPosition to the next
   byte.

10. Let quoteMark be the byte at encodingPosition.

11. If quoteMark is not either 0x22 («) or 0x27 (‘), then return failure.

12. Advance encodingPosition to the next byte.

13. Let encodingEndPosition be the position of the next occurrence of
    quoteMark at or after encodingPosition. If quoteMark does not
    occur again, then return failure.

14. Let potentialEncoding be the sequence of the bytes between
    encodingPosition (inclusive) and encodingEndPosition (exclusive).

15. If potentialEncoding contains one or more bytes whose byte value is 0x20 or
    below, then return failure.

16. Let encoding be the result of getting an encoding given
    potentialEncoding isomorphic decoded.

17. If the encoding is UTF-16BE/LE, then change it to
    UTF-8.

18. Return encoding.

For the sake of interoperability, user agents should not use a pre-scan algorithm that returns
different results than the one described above. (But, if you do, please at least let us know, so
that we can improve this algorithm and benefit everyone…)

13.2.3.3 Character encodings

User agents must support the encodings defined in Encoding, including, but
not limited to,
UTF-8,
ISO-8859-2,
ISO-8859-7,
ISO-8859-8,
windows-874,
windows-1250,
windows-1251,
windows-1252,
windows-1254,
windows-1255,
windows-1256,
windows-1257,
windows-1258,
GBK,
Big5,
ISO-2022-JP,
Shift_JIS,
EUC-KR,
UTF-16BE,
UTF-16LE,
UTF-16BE/LE, and
x-user-defined.
User agents must not support other encodings.

The above prohibits supporting, for example, CESU-8, UTF-7, BOCU-1, SCSU, EBCDIC,
and UTF-32. This specification does not make any attempt to support prohibited encodings in its
algorithms; support and use of prohibited encodings would thus lead to unexpected behavior. [CESU8] [UTF7] [BOCU1] [SCSU]

13.2.3.4 Changing the encoding while parsing

When the parser requires the user agent to change the encoding, it must run the
following steps. This might happen if the encoding sniffing algorithm described above
failed to find a character encoding, or if it found a character encoding that was not the actual
encoding of the file.

1. If the encoding that is already being used to interpret the input stream is
   UTF-16BE/LE, then set the confidence to certain and return. The new
   encoding is ignored; if it was anything but the same encoding, then it would be clearly
   incorrect.

2. If the new encoding is UTF-16BE/LE, then change it to
   UTF-8.

3. If the new encoding is x-user-defined, then change it to
   windows-1252.

4. If the new encoding is identical or equivalent to the encoding that is already being used
   to interpret the input stream, then set the confidence to certain and return.
   This happens when the encoding information found in the file matches what the encoding
   sniffing algorithm determined to be the encoding, and in the second pass through the
   parser if the first pass found that the encoding sniffing algorithm described in the earlier
   section failed to find the right encoding.

5. If all the bytes up to the last byte converted by the current decoder have the same
   Unicode interpretations in both the current encoding and the new encoding, and if the user agent
   supports changing the converter on the fly, then the user agent may change to the new converter
   for the encoding on the fly. Set the document’s character encoding and the encoding
   used to convert the input stream to the new encoding, set the confidence to certain, and return.

6. Otherwise, restart the navigate algorithm, with historyHandling set to «replace» and
   other inputs kept the same, but this time skip the encoding sniffing algorithm and
   instead just set the encoding to the new encoding and the confidence to certain. Whenever possible,
   this should be done without actually contacting the network layer (the bytes should be re-parsed
   from memory), even if, e.g., the document is marked as not being cacheable. If this is not
   possible and contacting the network layer would involve repeating a request that uses a method
   other than `GET`, then instead set the confidence to certain and ignore the new
   encoding. The resource will be misinterpreted. User agents may notify the user of the situation,
   to aid in application development.

This algorithm is only invoked when a new encoding is found declared on a
meta element.

13.2.3.5 Preprocessing the input stream

The input stream consists of the characters pushed into it as the input byte
stream is decoded or from the various APIs that directly manipulate the input stream.

Any occurrences of surrogates are surrogate-in-input-stream
parse errors. Any occurrences of noncharacters are noncharacter-in-input-stream
parse errors and any occurrences of controls other than ASCII whitespace and U+0000 NULL
characters are control-character-in-input-stream
parse errors.

The handling of U+0000 NULL characters varies based on where the characters are
found and happens at the later stages of the parsing. They are either ignored or, for security
reasons, replaced with a U+FFFD REPLACEMENT CHARACTER. This handling is, by necessity, spread
across both the tokenization stage and the tree construction stage.

Before the tokenization stage, the input stream must be preprocessed by normalizing newlines. Thus, newlines in HTML DOMs are
represented by U+000A LF characters, and there are never any U+000D CR characters in the input to
the tokenization stage.

The next input character is the first character in the input stream
that has not yet been consumed or explicitly ignored by the requirements in
this section. Initially, the next input character is the
first character in the input. The current input character is the last character to have
been consumed.

The insertion point is the position (just before a character or just before the end
of the input stream) where content inserted using document.write() is actually inserted. The insertion point is
relative to the position of the character immediately after it, it is not an absolute offset into
the input stream. Initially, the insertion point is undefined.

The «EOF» character in the tables below is a conceptual character representing the end of the
input stream. If the parser is a script-created parser, then the end of
the input stream is reached when an explicit «EOF» character (inserted by
the document.close() method) is consumed. Otherwise, the
«EOF» character is not a real character in the stream, but rather the lack of any further
characters.

13.2.4 Parse state

13.2.4.1 The insertion mode

The insertion mode is a state variable that controls the primary operation of the
tree construction stage.

Initially, the insertion mode is «initial». It can change to «before
html», «before head», «in head», «in head noscript», «after head»,
«in body», «text», «in table», «in table text», «in caption», «in column
group», «in table body», «in row», «in
cell», «in select», «in select in table», «in template», «after body»,
«in frameset», «after frameset», «after
after body», and «after after
frameset» during the course of the parsing, as described in the tree
construction stage. The insertion mode affects how tokens are processed and whether CDATA
sections are supported.

Several of these modes, namely «in head», «in body», «in
table», and «in select», are special, in
that the other modes defer to them at various times. When the algorithm below says that the user
agent is to do something «using the rules for the m insertion
mode», where m is one of these modes, the user agent must use the rules
described under the m insertion mode’s section, but must leave
the insertion mode unchanged unless the rules in m themselves
switch the insertion mode to a new value.

When the insertion mode is switched to «text» or
«in table text», the original insertion
mode is also set. This is the insertion mode to which the tree construction stage will
return.

Similarly, to parse nested template elements, a stack of template insertion
modes is used. It is initially empty. The current template insertion mode is the
insertion mode that was most recently added to the stack of template insertion modes.
The algorithms in the sections below will push insertion modes onto this stack, meaning
that the specified insertion mode is to be added to the stack, and pop insertion modes from
the stack, which means that the most recently added insertion mode must be removed from the
stack.

When the steps below require the UA to reset the insertion mode appropriately, it
means the UA must follow these steps:

1. Let last be false.

2. Let node be the last node in the stack of open
   elements.

3. Loop: If node is the first node in the stack of open elements, then set
   last to true, and, if the parser was created as part of the HTML fragment
   parsing algorithm (fragment case), set node to the context element passed to that algorithm.

4. If node is a select element, run these substeps:

   1. If last is true, jump to the step below labeled
      done.

   2. Let ancestor be node.

   3. Loop: If ancestor is the first node in the stack of
      open elements, jump to the step below labeled done.

   4. Let ancestor be the node before ancestor in the
      stack of open elements.

   5. If ancestor is a template node, jump to the step below
      labeled done.

   6. If ancestor is a table node, switch the insertion
      mode to «in select in table»
      and return.

   7. Jump back to the step labeled loop.

   8. Done: Switch the insertion mode to «in select» and return.

5. If node is a td or th element and last is
   false, then switch the insertion mode to «in
   cell» and return.

6. If node is a tr element, then switch the insertion
   mode to «in row» and return.

7. If node is a tbody, thead, or
   tfoot element, then switch the insertion mode to «in table body» and return.

8. If node is a caption element, then switch the
   insertion mode to «in caption» and
   return.

9. If node is a colgroup element, then switch the
   insertion mode to «in column
   group» and return.

10. If node is a table element, then switch the
    insertion mode to «in table» and
    return.

11. If node is a template element, then switch the
    insertion mode to the current template insertion mode and
    return.

12. If node is a head element and last is
    false, then switch the insertion mode to «in
    head» and return.

13. If node is a body element, then switch the
    insertion mode to «in body» and
    return.

14. If node is a frameset element, then switch the
    insertion mode to «in frameset» and
    return. (fragment case)

15. If node is an html element, run these substeps:

    1. If the head element pointer is null, switch the
       insertion mode to «before head»
       and return. (fragment case)

    2. Otherwise, the head element pointer is not null, switch the
       insertion mode to «after head» and
       return.

16. If last is true, then switch the insertion mode to «in body» and return. (fragment
    case)

17. Let node now be the node before node in the
    stack of open elements.

18. Return to the step labeled loop.

13.2.4.2 The stack of open elements

Initially, the stack of open elements is empty. The stack grows downwards; the
topmost node on the stack is the first one added to the stack, and the bottommost node of the
stack is the most recently added node in the stack (notwithstanding when the stack is manipulated
in a random access fashion as part of the handling for misnested
tags).

The «before html»
insertion mode creates the html document element, which is
then added to the stack.

In the fragment case, the stack of open elements is
initialized to contain an html element that is created as part of that algorithm. (The fragment case skips the
«before html» insertion mode.)

The html node, however it is created, is the topmost node of the stack. It only
gets popped off the stack when the parser finishes.

The current node is the bottommost node in this stack of open
elements.

The adjusted current node is the context
element if the parser was created as part of the HTML fragment parsing algorithm and
the stack of open elements has only one element in it (fragment case);
otherwise, the adjusted current node is the current node.

Elements in the stack of open elements fall into the following categories:

Special

The following elements have varying levels of special parsing rules: HTML’s
address, applet, area, article,
aside, base, basefont, bgsound,
blockquote, body, br, button,
caption, center, col, colgroup,
dd, details, dir, div, dl,
dt, embed, fieldset, figcaption,
figure, , form, frame,
frameset, h1, h2, h3, h4,
h5, h6, head, , hgroup,
hr, html, iframe,
img, input, keygen, li, link,
listing, main, marquee, ,
meta, nav, noembed, noframes,
noscript, object, ol, p, param,
plaintext, pre, script, section,
select, source, style, summary,
table, tbody, td, template,
textarea, tfoot, th, thead,
title, tr, track, ul, wbr,
xmp; MathML mi, MathML mo,
MathML mn, MathML ms, MathML
mtext, and MathML annotation-xml; and SVG
foreignObject, SVG desc, and SVG
title.

An image start tag token is handled by the tree builder,
but it is not in this list because it is not an element; it gets turned into an img
element.

Formatting

The following HTML elements are those that end up in the list of active formatting
elements: a, b, big, code,
em, font, i, nobr, s,
small, strike, strong, tt, and
u.

Ordinary

All other elements found while parsing an HTML document.

Typically, the special elements have the start and end tag tokens
handled specifically, while ordinary elements’ tokens fall into «any other start tag»
and «any other end tag» clauses, and some parts of the tree builder check if a particular element
in the stack of open elements is in the special category. However, some
elements (e.g., the option element) have their start or end tag tokens handled
specifically, but are still not in the special category, so that they get the
ordinary handling elsewhere.

The stack of open elements is said to have an element target node in a specific scope consisting of a
list of element types list when the following algorithm terminates in a match
state:

1. Initialize node to be the current node (the bottommost
   node of the stack).

2. If node is the target node, terminate in a match state.

3. Otherwise, if node is one of the element types in list, terminate in a failure state.

4. Otherwise, set node to the previous entry in the stack of open
   elements and return to step 2. (This will never fail, since the loop will always terminate
   in the previous step if the top of the stack — an html element — is
   reached.)

The stack of open elements is said to have a
particular element in scope when it has
that element in the specific scope consisting of the following element types:

• applet
• caption
• html
• table
• td
• th
• marquee
• object
• template
• MathML mi
• MathML mo
• MathML mn
• MathML ms
• MathML mtext
• MathML annotation-xml
• SVG foreignObject
• SVG desc
• SVG title

The stack of open elements is said to have a particular element in list item scope when it has that element in the specific scope consisting of the following
element types:

• All the element types listed above for the has an element in scope algorithm.
• ol in the HTML namespace
• ul in the HTML namespace

The stack of open elements is said to have a particular element in button scope when it has that element in the specific scope consisting of the following element
types:

• All the element types listed above for the has an element in scope algorithm.
• button in the HTML namespace

The stack of open elements is said to have a particular element in table scope when it has that element in the specific scope consisting of the following element
types:

• html in the HTML namespace
• table in the HTML namespace
• template in the HTML namespace

The stack of open elements is said to have a particular element in select scope when it has that element in the specific scope consisting of all element types
except the following:

• optgroup in the HTML namespace
• option in the HTML namespace

Nothing happens if at any time any of the elements in the stack of open elements
are moved to a new location in, or removed from, the Document tree. In particular,
the stack is not changed in this situation. This can cause, amongst other strange effects, content
to be appended to nodes that are no longer in the DOM.

In some cases (namely, when closing misnested formatting
elements), the stack is manipulated in a random-access fashion.

13.2.4.3 The list of active formatting elements

Initially, the list of active formatting elements is empty. It is used to handle
mis-nested formatting element tags.

The list contains elements in the formatting category, and markers. The markers are inserted when entering applet,
object, marquee, template, td,
th, and caption elements, and are used to prevent formatting from
«leaking» into applet, object, marquee,
template, td, th, and caption elements.

In addition, each element in the list of active formatting elements is associated
with the token for which it was created, so that further elements can be created for that token if
necessary.

When the steps below require the UA to push onto the list of active formatting
elements an element element, the UA must perform the following
steps:

1. If there are already three elements in the list of active formatting elements
   after the last marker, if any, or anywhere in the
   list if there are no markers, that have the same tag
   name, namespace, and attributes as element, then remove the earliest such
   element from the list of active formatting elements. For these purposes, the
   attributes must be compared as they were when the elements were created by the parser; two
   elements have the same attributes if all their parsed attributes can be paired such that the two
   attributes in each pair have identical names, namespaces, and values (the order of the attributes
   does not matter).

   This is the Noah’s Ark clause. But with three per family instead of two.

2. Add element to the list of active formatting
   elements.

When the steps below require the UA to reconstruct the active formatting elements,
the UA must perform the following steps:

1. If there are no entries in the list of active formatting elements, then there
   is nothing to reconstruct; stop this algorithm.

2. If the last (most recently added) entry in the list of active formatting
   elements is a marker, or if it is an element
   that is in the stack of open elements, then there is nothing to reconstruct; stop
   this algorithm.

3. Let entry be the last (most recently added) element in the list
   of active formatting elements.

4. Rewind: If there are no entries before entry in the list
   of active formatting elements, then jump to the step labeled create.

5. Let entry be the entry one earlier than entry in
   the list of active formatting elements.

6. If entry is neither a marker nor an element that is also in the stack of
   open elements, go to the step labeled rewind.

7. Advance: Let entry be the element one later than entry in the list of active formatting elements.

8. Create: Insert an HTML element for the token for which the element
   entry was created, to obtain new element.

9. Replace the entry for entry in the list with an entry for new element.

10. If the entry for new element in the list of active formatting
    elements is not the last entry in the list, return to the step labeled
    advance.

This has the effect of reopening all the formatting elements that were opened in the current
body, cell, or caption (whichever is youngest) that haven’t been explicitly closed.

The way this specification is written, the list of active formatting
elements always consists of elements in chronological order with the least recently added
element first and the most recently added element last (except for while steps 7 to 10 of the
above algorithm are being executed, of course).

When the steps below require the UA to clear the list of active formatting elements up to
the last marker, the UA must perform the following steps:

1. Let entry be the last (most recently added) entry in the list of
   active formatting elements.

2. Remove entry from the list of active formatting
   elements.

3. If entry was a marker,
   then stop the algorithm at this point. The list has been cleared up to the last marker.

4. Go to step 1.

13.2.4.4 The element pointers

Initially, the head element pointer and the form element pointer are both null.

Once a head element has been parsed (whether implicitly or explicitly) the
head element pointer gets set to point to this node.

The form element pointer points to the last
form element that was opened and whose end tag has not yet been seen. It is used to
make form controls associate with forms in the face of dramatically bad markup, for historical
reasons. It is ignored inside template elements.

13.2.4.5 Other parsing state flags

The scripting flag is set to «enabled» if scripting
was enabled for the Document with which the parser is associated when the
parser was created, and «disabled» otherwise.

The scripting flag can be enabled even when the parser was created as
part of the HTML fragment parsing algorithm, even though script elements
don’t execute in that case.

The frameset-ok flag is set to «ok» when the parser is created. It is set to «not
ok» after certain tokens are seen.

13.2.5 Tokenization

Implementations must act as if they used the following state machine to tokenize HTML. The
state machine must start in the data state. Most states consume a single character,
which may have various side-effects, and either switches the state machine to a new state to
reconsume the current input character, or switches it to a new state to
consume the next character, or stays in the same state
to consume the next character. Some states have more complicated behavior and can consume several
characters before switching to another state. In some cases, the tokenizer state is also changed
by the tree construction stage.

When a state says to reconsume a matched character in a specified state, that means
to switch to that state, but when it attempts to consume the next input character,
provide it with the current input character instead.

The exact behavior of certain states depends on the insertion mode and the
stack of open elements. Certain states also use a temporary buffer to track progress, and the character reference
state uses a return state to return to the
state it was invoked from.

The output of the tokenization step is a series of zero or more of the following tokens:
DOCTYPE, start tag, end tag, comment, character, end-of-file. DOCTYPE tokens have a name, a public
identifier, a system identifier, and a force-quirks flag. When a DOCTYPE token
is created, its name, public identifier, and system identifier must be marked as missing (which is
a distinct state from the empty string), and the force-quirks flag must be set to
off (its other state is on). Start and end tag tokens have a tag name, a self-closing flag, and a list of attributes, each of which has a
name and a value. When a start or end tag token is created, its self-closing flag must be unset (its other state is that it be set), and its attributes
list must be empty. Comment and character tokens have data.

When a token is emitted, it must immediately be handled by the tree construction
stage. The tree construction stage can affect the state of the tokenization stage, and can insert
additional characters into the stream. (For example, the script element can result in
scripts executing and using the dynamic markup insertion APIs to insert characters
into the stream being tokenized.)

Creating a token and emitting it are distinct actions. It is possible for a token
to be created but implicitly abandoned (never emitted), e.g. if the file ends unexpectedly while
processing the characters that are being parsed into a start tag token.

When a start tag token is emitted with its self-closing flag set, if the flag is not
acknowledged when it is processed by the tree
construction stage, that is a non-void-html-element-start-tag-with-trailing-solidus
parse error.

When an end tag token is emitted with attributes, that is an end-tag-with-attributes parse
error.

When an end tag token is emitted with its self-closing flag
set, that is an end-tag-with-trailing-solidus
parse error.

An appropriate end tag token is an end tag token whose tag name matches the tag name
of the last start tag to have been emitted from this tokenizer, if any. If no start tag has been
emitted from this tokenizer, then no end tag token is appropriate.

A character reference is said to be consumed as part of an attribute if the return state is either attribute value (double-quoted) state,
attribute value (single-quoted) state or attribute value (unquoted)
state.

When a state says to flush code points consumed as a character reference, it means
that for each code point in the temporary
buffer (in the order they were added to the buffer) user agent must append the code point
from the buffer to the current attribute’s value if the character reference was consumed as part of an attribute, or emit the code point as a
character token otherwise.

Before each step of the tokenizer, the user agent must first check
the parser pause flag. If it is true, then the tokenizer must abort the processing of
any nested invocations of the tokenizer, yielding control back to the caller.

The tokenizer state machine consists of the states defined in the following subsections.

13.2.5.1 Data state

Consume the next input character:

U+0026 AMPERSAND (&)

Set the return state to the data state.
Switch to the character reference state.

U+003C LESS-THAN SIGN (<)

Switch to the tag open state.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit the current input character as a character token.

EOF

Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.2 RCDATA state

Consume the next input character:

U+0026 AMPERSAND (&)

Set the return state to the RCDATA state.
Switch to the character reference state.

U+003C LESS-THAN SIGN (<)

Switch to the RCDATA less-than sign state.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.3 RAWTEXT state

Consume the next input character:

U+003C LESS-THAN SIGN (<)

Switch to the RAWTEXT less-than sign state.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.4 Script data state

Consume the next input character:

U+003C LESS-THAN SIGN (<)

Switch to the script data less-than sign state.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.5 PLAINTEXT state

Consume the next input character:

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.6 Tag open state

Consume the next input character:

U+0021 EXCLAMATION MARK (!)

Switch to the markup declaration open state.

U+002F SOLIDUS (/)

Switch to the end tag open state.

ASCII alpha

Create a new start tag token, set its tag name to the empty string. Reconsume in
the tag name state.

U+003F QUESTION MARK (?)

This is an unexpected-question-mark-instead-of-tag-name
parse error. Create a comment token whose data is the empty string.
Reconsume in the bogus comment state.

EOF

This is an eof-before-tag-name
parse error. Emit a U+003C LESS-THAN SIGN character token and an end-of-file
token.

Anything else

This is an invalid-first-character-of-tag-name
parse error. Emit a U+003C LESS-THAN SIGN character token. Reconsume in
the data state.

13.2.5.7 End tag open state

Consume the next input character:

ASCII alpha

Create a new end tag token, set its tag name to the empty string. Reconsume in
the tag name state.

U+003E GREATER-THAN SIGN (>)

This is a missing-end-tag-name
parse error. Switch to the data state.

EOF

This is an eof-before-tag-name
parse error. Emit a U+003C LESS-THAN SIGN character token, a U+002F SOLIDUS
character token and an end-of-file token.

Anything else

This is an invalid-first-character-of-tag-name
parse error. Create a comment token whose data is the empty string.
Reconsume in the bogus comment state.

13.2.5.8 Tag name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before attribute name state.

U+002F SOLIDUS (/)

Switch to the self-closing start tag state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current tag token.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current tag token’s tag name.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current tag token’s tag
name.

EOF

This is an eof-in-tag parse error.
Emit an end-of-file token.

Anything else

Append the current input character to the current tag token’s tag name.

13.2.5.9 RCDATA less-than sign state

Consume the next input character:

U+002F SOLIDUS (/)

Set the temporary buffer to the empty string. Switch to
the RCDATA end tag open state.

Anything else

Emit a U+003C LESS-THAN SIGN character token. Reconsume in the RCDATA
state.

13.2.5.10 RCDATA end tag open state

Consume the next input character:

ASCII alpha

Create a new end tag token, set its tag name to the empty string. Reconsume in
the RCDATA end tag name state.

Anything else

Emit a U+003C LESS-THAN SIGN character token and a U+002F SOLIDUS character token.
Reconsume in the RCDATA state.

13.2.5.11 RCDATA end tag name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

If the current end tag token is an appropriate end tag token, then switch to the
before attribute name state. Otherwise, treat it as per the «anything else» entry
below.

U+002F SOLIDUS (/)

If the current end tag token is an appropriate end tag token, then switch to the
self-closing start tag state. Otherwise, treat it as per the «anything else» entry
below.

U+003E GREATER-THAN SIGN (>)

If the current end tag token is an appropriate end tag token, then switch to the
data state and emit the current tag token. Otherwise, treat it as per the «anything
else» entry below.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current tag token’s tag name. Append the current input
character to the temporary buffer.

ASCII lower alpha

Append the current input character to the current tag token’s tag name. Append
the current input character to the temporary
buffer.

Anything else

Emit a U+003C LESS-THAN SIGN character token, a U+002F SOLIDUS character token, and a
character token for each of the characters in the temporary
buffer (in the order they were added to the buffer). Reconsume in the
RCDATA state.

13.2.5.12 RAWTEXT less-than sign state

Consume the next input character:

U+002F SOLIDUS (/)

Set the temporary buffer to the empty string. Switch to
the RAWTEXT end tag open state.

Anything else

Emit a U+003C LESS-THAN SIGN character token. Reconsume in the RAWTEXT
state.

13.2.5.13 RAWTEXT end tag open state

Consume the next input character:

ASCII alpha

Create a new end tag token, set its tag name to the empty string. Reconsume in
the RAWTEXT end tag name state.

Anything else

Emit a U+003C LESS-THAN SIGN character token and a U+002F SOLIDUS character token.
Reconsume in the RAWTEXT state.

13.2.5.14 RAWTEXT end tag name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

If the current end tag token is an appropriate end tag token, then switch to the
before attribute name state. Otherwise, treat it as per the «anything else» entry
below.

U+002F SOLIDUS (/)

If the current end tag token is an appropriate end tag token, then switch to the
self-closing start tag state. Otherwise, treat it as per the «anything else» entry
below.

U+003E GREATER-THAN SIGN (>)

If the current end tag token is an appropriate end tag token, then switch to the
data state and emit the current tag token. Otherwise, treat it as per the «anything
else» entry below.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current tag token’s tag name. Append the current input
character to the temporary buffer.

ASCII lower alpha

Append the current input character to the current tag token’s tag name. Append
the current input character to the temporary
buffer.

Anything else

Emit a U+003C LESS-THAN SIGN character token, a U+002F SOLIDUS character token, and a
character token for each of the characters in the temporary
buffer (in the order they were added to the buffer). Reconsume in the
RAWTEXT state.

13.2.5.15 Script data less-than sign state

Consume the next input character:

U+002F SOLIDUS (/)

Set the temporary buffer to the empty string. Switch to
the script data end tag open state.

U+0021 EXCLAMATION MARK (!)

Switch to the script data escape start state. Emit a U+003C LESS-THAN SIGN
character token and a U+0021 EXCLAMATION MARK character token.

Anything else

Emit a U+003C LESS-THAN SIGN character token. Reconsume in the script data
state.

13.2.5.16 Script data end tag open state

Consume the next input character:

ASCII alpha

Create a new end tag token, set its tag name to the empty string. Reconsume in
the script data end tag name state.

Anything else

Emit a U+003C LESS-THAN SIGN character token and a U+002F SOLIDUS character token.
Reconsume in the script data state.

13.2.5.17 Script data end tag name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

If the current end tag token is an appropriate end tag token, then switch to the
before attribute name state. Otherwise, treat it as per the «anything else» entry
below.

U+002F SOLIDUS (/)

If the current end tag token is an appropriate end tag token, then switch to the
self-closing start tag state. Otherwise, treat it as per the «anything else» entry
below.

U+003E GREATER-THAN SIGN (>)

If the current end tag token is an appropriate end tag token, then switch to the
data state and emit the current tag token. Otherwise, treat it as per the «anything
else» entry below.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current tag token’s tag name. Append the current input
character to the temporary buffer.

ASCII lower alpha

Append the current input character to the current tag token’s tag name. Append
the current input character to the temporary
buffer.

Anything else

Emit a U+003C LESS-THAN SIGN character token, a U+002F SOLIDUS character token, and a
character token for each of the characters in the temporary
buffer (in the order they were added to the buffer). Reconsume in the
script data state.

13.2.5.18 Script data escape start state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data escape start dash state. Emit a U+002D HYPHEN-MINUS
character token.

Anything else

Reconsume in the script data state.

13.2.5.19 Script data escape start dash state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data escaped dash dash state. Emit a U+002D HYPHEN-MINUS
character token.

Anything else

Reconsume in the script data state.

13.2.5.20 Script data escaped state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data escaped dash state. Emit a U+002D HYPHEN-MINUS
character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data escaped less-than sign state.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.21 Script data escaped dash state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data escaped dash dash state. Emit a U+002D HYPHEN-MINUS
character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data escaped less-than sign state.

U+0000 NULL

This is an unexpected-null-character parse
error. Switch to the script data escaped state. Emit a U+FFFD REPLACEMENT
CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Switch to the script data escaped state. Emit the current input
character as a character token.

13.2.5.22 Script data escaped dash dash state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Emit a U+002D HYPHEN-MINUS character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data escaped less-than sign state.

U+003E GREATER-THAN SIGN (>)

Switch to the script data state. Emit a U+003E GREATER-THAN SIGN character
token.

U+0000 NULL

This is an unexpected-null-character parse
error. Switch to the script data escaped state. Emit a U+FFFD REPLACEMENT
CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Switch to the script data escaped state. Emit the current input
character as a character token.

13.2.5.23 Script data escaped less-than sign state

Consume the next input character:

U+002F SOLIDUS (/)

Set the temporary buffer to the empty string. Switch to
the script data escaped end tag open state.

ASCII alpha

Set the temporary buffer to the empty string. Emit a
U+003C LESS-THAN SIGN character token. Reconsume in the script data double
escape start state.

Anything else

Emit a U+003C LESS-THAN SIGN character token. Reconsume in the script data
escaped state.

13.2.5.24 Script data escaped end tag open state

Consume the next input character:

ASCII alpha

Create a new end tag token, set its tag name to the empty string. Reconsume in
the script data escaped end tag name state.

Anything else

Emit a U+003C LESS-THAN SIGN character token and a U+002F SOLIDUS character token.
Reconsume in the script data escaped state.

13.2.5.25 Script data escaped end tag name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

If the current end tag token is an appropriate end tag token, then switch to the
before attribute name state. Otherwise, treat it as per the «anything else» entry
below.

U+002F SOLIDUS (/)

If the current end tag token is an appropriate end tag token, then switch to the
self-closing start tag state. Otherwise, treat it as per the «anything else» entry
below.

U+003E GREATER-THAN SIGN (>)

If the current end tag token is an appropriate end tag token, then switch to the
data state and emit the current tag token. Otherwise, treat it as per the «anything
else» entry below.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current tag token’s tag name. Append the current input
character to the temporary buffer.

ASCII lower alpha

Append the current input character to the current tag token’s tag name. Append
the current input character to the temporary
buffer.

Anything else

Emit a U+003C LESS-THAN SIGN character token, a U+002F SOLIDUS character token, and a
character token for each of the characters in the temporary buffer
(in the order they were added to the buffer). Reconsume in the script
data escaped state.

13.2.5.26 Script data double escape start state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

U+002F SOLIDUS (/)

U+003E GREATER-THAN SIGN (>)

If the temporary buffer is the string «script«, then switch to the script data double escaped state.
Otherwise, switch to the script data escaped state. Emit the current input
character as a character token.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the temporary buffer. Emit the
current input character as a character token.

ASCII lower alpha

Append the current input character to the temporary buffer. Emit the current input character as a character
token.

Anything else

Reconsume in the script data escaped state.

13.2.5.27 Script data double escaped state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data double escaped dash state. Emit a U+002D HYPHEN-MINUS
character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data double escaped less-than sign state. Emit a U+003C
LESS-THAN SIGN character token.

U+0000 NULL

This is an unexpected-null-character parse
error. Emit a U+FFFD REPLACEMENT CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

13.2.5.28 Script data double escaped dash state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the script data double escaped dash dash state. Emit a U+002D
HYPHEN-MINUS character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data double escaped less-than sign state. Emit a U+003C
LESS-THAN SIGN character token.

U+0000 NULL

This is an unexpected-null-character parse
error. Switch to the script data double escaped state. Emit a U+FFFD
REPLACEMENT CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Switch to the script data double escaped state. Emit the current input
character as a character token.

13.2.5.29 Script data double escaped dash dash state

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Emit a U+002D HYPHEN-MINUS character token.

U+003C LESS-THAN SIGN (<)

Switch to the script data double escaped less-than sign state. Emit a U+003C
LESS-THAN SIGN character token.

U+003E GREATER-THAN SIGN (>)

Switch to the script data state. Emit a U+003E GREATER-THAN SIGN character
token.

U+0000 NULL

This is an unexpected-null-character parse
error. Switch to the script data double escaped state. Emit a U+FFFD
REPLACEMENT CHARACTER character token.

EOF

This is an eof-in-script-html-comment-like-text
parse error. Emit an end-of-file token.

Anything else

Switch to the script data double escaped state. Emit the current input
character as a character token.

13.2.5.30 Script data double escaped less-than sign state

Consume the next input character:

U+002F SOLIDUS (/)

Set the temporary buffer to the empty string. Switch to
the script data double escape end state. Emit a U+002F SOLIDUS character token.

Anything else

Reconsume in the script data double escaped state.

13.2.5.31 Script data double escape end state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

U+002F SOLIDUS (/)

U+003E GREATER-THAN SIGN (>)

If the temporary buffer is the string «script«, then switch to the script data escaped state. Otherwise,
switch to the script data double escaped state. Emit the current input
character as a character token.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the temporary buffer. Emit the
current input character as a character token.

ASCII lower alpha

Append the current input character to the temporary buffer. Emit the current input character as a character
token.

Anything else

Reconsume in the script data double escaped state.

13.2.5.32 Before attribute name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+002F SOLIDUS (/)

U+003E GREATER-THAN SIGN (>)

EOF

Reconsume in the after attribute name state.

U+003D EQUALS SIGN (=)

This is an unexpected-equals-sign-before-attribute-name
parse error. Start a new attribute in the current tag token. Set that attribute’s
name to the current input character, and its value to the empty string. Switch to
the attribute name state.

Anything else

Start a new attribute in the current tag token. Set that attribute name and value to the
empty string. Reconsume in the attribute name state.

13.2.5.33 Attribute name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

U+002F SOLIDUS (/)

U+003E GREATER-THAN SIGN (>)

EOF

Reconsume in the after attribute name state.

U+003D EQUALS SIGN (=)

Switch to the before attribute value state.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current attribute’s name.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current attribute’s
name.

U+0022 QUOTATION MARK («)

U+0027 APOSTROPHE (‘)

U+003C LESS-THAN SIGN (<)

This is an unexpected-character-in-attribute-name
parse error. Treat it as per the «anything else» entry below.

Anything else

Append the current input character to the current attribute’s name.

When the user agent leaves the attribute name state (and before emitting the tag token, if
appropriate), the complete attribute’s name must be compared to the other attributes on the same
token; if there is already an attribute on the token with the exact same name, then this is a
duplicate-attribute parse error
and the new attribute must be removed from the token.

If an attribute is so removed from a token, it, and the value that gets associated
with it, if any, are never subsequently used by the parser, and are therefore effectively
discarded. Removing the attribute in this way does not change its status as the «current
attribute» for the purposes of the tokenizer, however.

13.2.5.34 After attribute name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+002F SOLIDUS (/)

Switch to the self-closing start tag state.

U+003D EQUALS SIGN (=)

Switch to the before attribute value state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current tag token.

EOF

This is an eof-in-tag
parse error. Emit an end-of-file token.

Anything else

Start a new attribute in the current tag token. Set that attribute name and value to the
empty string. Reconsume in the attribute name state.

13.2.5.35 Before attribute value state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+0022 QUOTATION MARK («)

Switch to the attribute value (double-quoted) state.

U+0027 APOSTROPHE (‘)

Switch to the attribute value (single-quoted) state.

U+003E GREATER-THAN SIGN (>)

This is a missing-attribute-value
parse error. Switch to the data state. Emit the current tag token.

Anything else

Reconsume in the attribute value (unquoted) state.

13.2.5.36 Attribute value (double-quoted) state

Consume the next input character:

U+0022 QUOTATION MARK («)

Switch to the after attribute value (quoted) state.

U+0026 AMPERSAND (&)

Set the return state to the attribute value
(double-quoted) state. Switch to the character reference state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current attribute’s
value.

EOF

This is an eof-in-tag parse error.
Emit an end-of-file token.

Anything else

Append the current input character to the current attribute’s value.

13.2.5.37 Attribute value (single-quoted) state

Consume the next input character:

U+0027 APOSTROPHE (‘)

Switch to the after attribute value (quoted) state.

U+0026 AMPERSAND (&)

Set the return state to the attribute value
(single-quoted) state. Switch to the character reference state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current attribute’s
value.

EOF

This is an eof-in-tag parse error.
Emit an end-of-file token.

Anything else

Append the current input character to the current attribute’s value.

13.2.5.38 Attribute value (unquoted) state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before attribute name state.

U+0026 AMPERSAND (&)

Set the return state to the attribute value
(unquoted) state. Switch to the character reference state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current tag token.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current attribute’s
value.

U+0022 QUOTATION MARK («)

U+0027 APOSTROPHE (‘)

U+003C LESS-THAN SIGN (<)

U+003D EQUALS SIGN (=)

U+0060 GRAVE ACCENT (`)

This is an unexpected-character-in-unquoted-attribute-value
parse error. Treat it as per the «anything else» entry below.

EOF

This is an eof-in-tag
parse error. Emit an end-of-file token.

Anything else

Append the current input character to the current attribute’s value.

13.2.5.39 After attribute value (quoted) state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before attribute name state.

U+002F SOLIDUS (/)

Switch to the self-closing start tag state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current tag token.

EOF

This is an eof-in-tag parse error.
Emit an end-of-file token.

Anything else

This is a missing-whitespace-between-attributes
parse error. Reconsume in the before attribute name state.

13.2.5.40 Self-closing start tag state

Consume the next input character:

U+003E GREATER-THAN SIGN (>)

Set the self-closing flag of the current tag token. Switch
to the data state. Emit the current tag token.

EOF

This is an eof-in-tag
parse error. Emit an end-of-file token.

Anything else

This is an unexpected-solidus-in-tag parse
error. Reconsume in the before attribute name state.

Consume the next input character:

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current comment token.

EOF

Emit the comment. Emit an end-of-file token.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the comment token’s data.

Anything else

Append the current input character to the comment token’s data.

13.2.5.42 Markup declaration open state

If the next few characters are:

Two U+002D HYPHEN-MINUS characters (-)

Consume those two characters, create a comment token whose data is the empty string, and
switch to the comment start state.

ASCII case-insensitive match for the word «DOCTYPE»

Consume those characters and switch to the DOCTYPE state.

The string «[CDATA[» (the five uppercase letters «CDATA» with a U+005B LEFT SQUARE BRACKET
character before and after)

Consume those characters. If there is an adjusted current node and it is not
an element in the HTML namespace, then switch to the CDATA section
state. Otherwise, this is a cdata-in-html-content parse
error. Create a comment token whose data is the «[CDATA[» string. Switch to the
bogus comment state.

Anything else

This is an incorrectly-opened-comment
parse error. Create a comment token whose data is the empty string. Switch to the
bogus comment state (don’t consume anything in the current state).

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the comment start dash state.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-closing-of-empty-comment parse
error. Switch to the data state. Emit the current comment token.

Anything else

Reconsume in the comment state.

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the comment end state.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-closing-of-empty-comment parse
error. Switch to the data state. Emit the current comment token.

EOF

This is an eof-in-comment parse
error. Emit the current comment token. Emit an end-of-file token.

Anything else

Append a U+002D HYPHEN-MINUS character (-) to the comment token’s data.
Reconsume in the comment state.

Consume the next input character:

U+003C LESS-THAN SIGN (<)

Append the current input character to the comment token’s data. Switch to the
comment less-than sign state.

U+002D HYPHEN-MINUS (-)

Switch to the comment end dash state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the comment token’s data.

EOF

This is an eof-in-comment parse
error. Emit the current comment token. Emit an end-of-file token.

Anything else

Append the current input character to the comment token’s data.

Consume the next input character:

U+0021 EXCLAMATION MARK (!)

Append the current input character to the comment token’s data. Switch to the
comment less-than sign bang state.

U+003C LESS-THAN SIGN (<)

Append the current input character to the comment token’s data.

Anything else

Reconsume in the comment state.

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the comment less-than sign bang dash state.

Anything else

Reconsume in the comment state.

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the comment less-than sign bang dash dash state.

Anything else

Reconsume in the comment end dash state.

Consume the next input character:

U+003E GREATER-THAN SIGN (>)

EOF

Reconsume in the comment end state.

Anything else

This is a nested-comment parse
error. Reconsume in the comment end state.

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Switch to the comment end state.

EOF

This is an eof-in-comment parse
error. Emit the current comment token. Emit an end-of-file token.

Anything else

Append a U+002D HYPHEN-MINUS character (-) to the comment token’s data.
Reconsume in the comment state.

Consume the next input character:

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current comment token.

U+0021 EXCLAMATION MARK (!)

Switch to the comment end bang state.

U+002D HYPHEN-MINUS (-)

Append a U+002D HYPHEN-MINUS character (-) to the comment token’s data.

EOF

This is an eof-in-comment parse
error. Emit the current comment token. Emit an end-of-file token.

Anything else

Append two U+002D HYPHEN-MINUS characters (-) to the comment token’s data.
Reconsume in the comment state.

Consume the next input character:

U+002D HYPHEN-MINUS (-)

Append two U+002D HYPHEN-MINUS characters (-) and a U+0021 EXCLAMATION MARK character (!) to
the comment token’s data. Switch to the comment end dash state.

U+003E GREATER-THAN SIGN (>)

This is an incorrectly-closed-comment parse
error. Switch to the data state. Emit the current comment token.

EOF

This is an eof-in-comment parse
error. Emit the current comment token. Emit an end-of-file token.

Anything else

Append two U+002D HYPHEN-MINUS characters (-) and a U+0021 EXCLAMATION MARK character (!) to
the comment token’s data. Reconsume in the comment state.

13.2.5.53 DOCTYPE state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before DOCTYPE name state.

U+003E GREATER-THAN SIGN (>)

Reconsume in the before DOCTYPE name state.

EOF

This is an eof-in-doctype parse
error. Create a new DOCTYPE token. Set its force-quirks
flag to on. Emit the current token. Emit an end-of-file token.

Anything else

This is a missing-whitespace-before-doctype-name
parse error. Reconsume in the before DOCTYPE name state.

13.2.5.54 Before DOCTYPE name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

ASCII upper alpha

Create a new DOCTYPE token. Set the token’s name to the lowercase version of the
current input character (add 0x0020 to the character’s code point). Switch to the
DOCTYPE name state.

U+0000 NULL

This is an unexpected-null-character parse
error. Create a new DOCTYPE token. Set the token’s name to a U+FFFD REPLACEMENT CHARACTER
character. Switch to the DOCTYPE name state.

U+003E GREATER-THAN SIGN (>)

This is a missing-doctype-name
parse error. Create a new DOCTYPE token. Set its force-quirks flag to on. Switch to the data
state. Emit the current token.

EOF

This is an eof-in-doctype parse
error. Create a new DOCTYPE token. Set its force-quirks
flag to on. Emit the current token. Emit an end-of-file token.

Anything else

Create a new DOCTYPE token. Set the token’s name to the current input character.
Switch to the DOCTYPE name state.

13.2.5.55 DOCTYPE name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the after DOCTYPE name state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current DOCTYPE token.

ASCII upper alpha

Append the lowercase version of the current input character (add 0x0020 to the
character’s code point) to the current DOCTYPE token’s name.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current DOCTYPE token’s
name.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

Append the current input character to the current DOCTYPE token’s name.

13.2.5.56 After DOCTYPE name state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

If the six characters starting from the current input character are an
ASCII case-insensitive match for the word «PUBLIC», then consume those characters
and switch to the after DOCTYPE public keyword state.

Otherwise, if the six characters starting from the current input character are
an ASCII case-insensitive match for the word «SYSTEM», then consume those
characters and switch to the after DOCTYPE system keyword state.

Otherwise, this is an invalid-character-sequence-after-doctype-name
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.57 After DOCTYPE public keyword state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before DOCTYPE public identifier state.

U+0022 QUOTATION MARK («)

This is a missing-whitespace-after-doctype-public-keyword
parse error. Set the current DOCTYPE token’s public identifier to the empty string (not
missing), then switch to the DOCTYPE public identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

This is a missing-whitespace-after-doctype-public-keyword
parse error. Set the current DOCTYPE token’s public identifier to the empty string (not
missing), then switch to the DOCTYPE public identifier (single-quoted) state.

U+003E GREATER-THAN SIGN (>)

This is a missing-doctype-public-identifier parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-public-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.58 Before DOCTYPE public identifier state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+0022 QUOTATION MARK («)

Set the current DOCTYPE token’s public identifier to the empty string (not missing), then switch to
the DOCTYPE public identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

Set the current DOCTYPE token’s public identifier to the empty string (not missing), then switch to
the DOCTYPE public identifier (single-quoted) state.

U+003E GREATER-THAN SIGN (>)

This is a missing-doctype-public-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-public-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.59 DOCTYPE public identifier (double-quoted) state

Consume the next input character:

U+0022 QUOTATION MARK («)

Switch to the after DOCTYPE public identifier state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current DOCTYPE token’s
public identifier.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-doctype-public-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

Append the current input character to the current DOCTYPE token’s public
identifier.

13.2.5.60 DOCTYPE public identifier (single-quoted) state

Consume the next input character:

U+0027 APOSTROPHE (‘)

Switch to the after DOCTYPE public identifier state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current DOCTYPE token’s
public identifier.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-doctype-public-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

Append the current input character to the current DOCTYPE token’s public
identifier.

13.2.5.61 After DOCTYPE public identifier state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the between DOCTYPE public and system identifiers state.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current DOCTYPE token.

U+0022 QUOTATION MARK («)

This is a missing-whitespace-between-doctype-public-and-system-identifiers
parse error. Set the current DOCTYPE token’s system identifier to the empty string (not
missing), then switch to the DOCTYPE system identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

This is a missing-whitespace-between-doctype-public-and-system-identifiers
parse error. Set the current DOCTYPE token’s system identifier to the empty string (not
missing), then switch to the DOCTYPE system identifier (single-quoted) state.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.62 Between DOCTYPE public and system identifiers state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current DOCTYPE token.

U+0022 QUOTATION MARK («)

Set the current DOCTYPE token’s system identifier to the empty string (not missing), then switch to
the DOCTYPE system identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

Set the current DOCTYPE token’s system identifier to the empty string (not missing), then switch to
the DOCTYPE system identifier (single-quoted) state.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.63 After DOCTYPE system keyword state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Switch to the before DOCTYPE system identifier state.

U+0022 QUOTATION MARK («)

This is a missing-whitespace-after-doctype-system-keyword
parse error. Set the current DOCTYPE token’s system identifier to the empty string (not
missing), then switch to the DOCTYPE system identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

This is a missing-whitespace-after-doctype-system-keyword
parse error. Set the current DOCTYPE token’s system identifier to the empty string (not
missing), then switch to the DOCTYPE system identifier (single-quoted) state.

U+003E GREATER-THAN SIGN (>)

This is a missing-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.64 Before DOCTYPE system identifier state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+0022 QUOTATION MARK («)

Set the current DOCTYPE token’s system identifier to the empty string (not missing), then switch to
the DOCTYPE system identifier (double-quoted) state.

U+0027 APOSTROPHE (‘)

Set the current DOCTYPE token’s system identifier to the empty string (not missing), then switch to
the DOCTYPE system identifier (single-quoted) state.

U+003E GREATER-THAN SIGN (>)

This is a missing-doctype-system-identifier parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is a missing-quote-before-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Reconsume in the bogus DOCTYPE state.

13.2.5.65 DOCTYPE system identifier (double-quoted) state

Consume the next input character:

U+0022 QUOTATION MARK («)

Switch to the after DOCTYPE system identifier state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current DOCTYPE token’s
system identifier.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

Append the current input character to the current DOCTYPE token’s system
identifier.

13.2.5.66 DOCTYPE system identifier (single-quoted) state

Consume the next input character:

U+0027 APOSTROPHE (‘)

Switch to the after DOCTYPE system identifier state.

U+0000 NULL

This is an unexpected-null-character parse
error. Append a U+FFFD REPLACEMENT CHARACTER character to the current DOCTYPE token’s
system identifier.

U+003E GREATER-THAN SIGN (>)

This is an abrupt-doctype-system-identifier
parse error. Set the current DOCTYPE token’s force-quirks
flag to on. Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

Append the current input character to the current DOCTYPE token’s system
identifier.

13.2.5.67 After DOCTYPE system identifier state

Consume the next input character:

U+0009 CHARACTER TABULATION (tab)

U+000A LINE FEED (LF)

U+000C FORM FEED (FF)

U+0020 SPACE

Ignore the character.

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the current DOCTYPE token.

EOF

This is an eof-in-doctype parse
error. Set the current DOCTYPE token’s force-quirks flag to
on. Emit the current DOCTYPE token. Emit an end-of-file token.

Anything else

This is an unexpected-character-after-doctype-system-identifier
parse error. Reconsume in the bogus DOCTYPE state. (This
does not set the current DOCTYPE token’s force-quirks flag to
on.)

13.2.5.68 Bogus DOCTYPE state

Consume the next input character:

U+003E GREATER-THAN SIGN (>)

Switch to the data state. Emit the DOCTYPE token.

U+0000 NULL

This is an unexpected-null-character parse
error. Ignore the character.

EOF

Emit the DOCTYPE token. Emit an end-of-file token.

Anything else

Ignore the character.

13.2.5.69 CDATA section state

Consume the next input character:

U+005D RIGHT SQUARE BRACKET (])

Switch to the CDATA section bracket state.

EOF

This is an eof-in-cdata parse
error. Emit an end-of-file token.

Anything else

Emit the current input character as a character token.

U+0000 NULL characters are handled in the tree construction stage, as part of the
in foreign content insertion mode, which
is the only place where CDATA sections can appear.

13.2.5.70 CDATA section bracket state

Consume the next input character:

U+005D RIGHT SQUARE BRACKET (])

Switch to the CDATA section end state.

Anything else

Emit a U+005D RIGHT SQUARE BRACKET character token. Reconsume in the
CDATA section state.

13.2.5.71 CDATA section end state

Consume the next input character:

U+005D RIGHT SQUARE BRACKET (])

Emit a U+005D RIGHT SQUARE BRACKET character token.

U+003E GREATER-THAN SIGN character

Switch to the data state.

Anything else

Emit two U+005D RIGHT SQUARE BRACKET character tokens. Reconsume in the
CDATA section state.

13.2.5.72 Character reference state

Set the temporary buffer to the empty string. Append
a U+0026 AMPERSAND (&) character to the temporary
buffer. Consume the next input character:

ASCII alphanumeric

Reconsume in the named character reference state.

U+0023 NUMBER SIGN (#)

Append the current input character to the
temporary buffer. Switch to the numeric character
reference state.

Anything else

Flush code points consumed as a character reference. Reconsume in
the return state.

13.2.5.73 Named character reference state

Consume the maximum number of characters possible, where the consumed characters are one of the
identifiers in the first column of the named character references table. Append each
character to the temporary buffer when it’s consumed.

If there is a match

If the character reference was consumed as part of an
attribute, and the last character matched is not a U+003B SEMICOLON character (;), and
the next input character is either a U+003D EQUALS SIGN character (=) or an
ASCII alphanumeric, then, for historical reasons, flush code points consumed
as a character reference and switch to the return state.

Otherwise:

1. If the last character matched is not a U+003B SEMICOLON character (;), then this is a
   missing-semicolon-after-character-reference
   parse error.

2. Set the temporary buffer to the empty string.
   Append one or two characters corresponding to the character reference name (as given by the
   second column of the named character references table) to the temporary buffer.

3. Flush code points consumed as a character reference. Switch to the return state.

Otherwise

Flush code points consumed as a character reference. Switch to the
ambiguous ampersand state.

13.2.5.74 Ambiguous ampersand state

Consume the next input character:

ASCII alphanumeric

If the character reference was consumed as part of an
attribute, then append the current input character to the current
attribute’s value. Otherwise, emit the current input character as a character
token.

U+003B SEMICOLON (;)

This is an unknown-named-character-reference
parse error. Reconsume in the return
state.

Anything else

Reconsume in the return state.

13.2.5.75 Numeric character reference state

Set the character reference code to
zero (0).

Consume the next input character:

U+0078 LATIN SMALL LETTER X

U+0058 LATIN CAPITAL LETTER X

Append the current input character to the temporary buffer. Switch to the hexadecimal character reference start
state.

Anything else

Reconsume in the decimal character reference start state.

13.2.5.76 Hexadecimal character reference start state

Consume the next input character:

ASCII hex digit

Reconsume in the hexadecimal character reference state.

Anything else

This is an absence-of-digits-in-numeric-character-reference
parse error. Flush code points consumed as a character reference.
Reconsume in the return state.

13.2.5.77 Decimal character reference start state

Consume the next input character:

ASCII digit

Reconsume in the decimal character reference state.

Anything else

This is an absence-of-digits-in-numeric-character-reference
parse error. Flush code points consumed as a character reference.
Reconsume in the return state.

13.2.5.78 Hexadecimal character reference state

Consume the next input character:

ASCII digit

Multiply the character reference code by 16.
Add a numeric version of the current input character (subtract 0x0030 from the
character’s code point) to the character reference
code.

ASCII upper hex digit

Multiply the character reference code by 16.
Add a numeric version of the current input character as a hexadecimal digit
(subtract 0x0037 from the character’s code point) to the character reference code.

ASCII lower hex digit

Multiply the character reference code by 16.
Add a numeric version of the current input character as a hexadecimal digit
(subtract 0x0057 from the character’s code point) to the character reference code.

U+003B SEMICOLON

Switch to the numeric character reference end state.

Anything else

This is a missing-semicolon-after-character-reference
parse error. Reconsume in the numeric character reference end
state.

13.2.5.79 Decimal character reference state

Consume the next input character:

ASCII digit

Multiply the character reference code by 10.
Add a numeric version of the current input character (subtract 0x0030 from the
character’s code point) to the character reference
code.

U+003B SEMICOLON

Switch to the numeric character reference end state.

Anything else

This is a missing-semicolon-after-character-reference
parse error. Reconsume in the numeric character reference end
state.

13.2.5.80 Numeric character reference end state

Check the character reference code:

• If the number is 0x00, then this is a null-character-reference parse
  error. Set the character reference code to
  0xFFFD.

• If the number is greater than 0x10FFFF, then this is a character-reference-outside-unicode-range
  parse error. Set the character reference
  code to 0xFFFD.

• If the number is a surrogate, then this is a surrogate-character-reference
  parse error. Set the character reference
  code to 0xFFFD.

• If the number is a noncharacter, then this is a
  noncharacter-character-reference
  parse error.

• If the number is 0x0D, or a
  control that’s not ASCII whitespace, then this is a
  control-character-reference
  parse error. If the number is one of the numbers in the first column of the
  following table, then find the row with that number in the first column, and set the character reference code to the number in the second
  column of that row.

  Number	Code point
  0x80	0x20AC	EURO SIGN (€)
  0x82	0x201A	SINGLE LOW-9 QUOTATION MARK (‚)
  0x83	0x0192	LATIN SMALL LETTER F WITH HOOK (ƒ)
  0x84	0x201E	DOUBLE LOW-9 QUOTATION MARK („)
  0x85	0x2026	HORIZONTAL ELLIPSIS (…)
  0x86	0x2020	DAGGER (†)
  0x87	0x2021	DOUBLE DAGGER (‡)
  0x88	0x02C6	MODIFIER LETTER CIRCUMFLEX ACCENT (ˆ)
  0x89	0x2030	PER MILLE SIGN (‰)
  0x8A	0x0160	LATIN CAPITAL LETTER S WITH CARON (Š)
  0x8B	0x2039	SINGLE LEFT-POINTING ANGLE QUOTATION MARK (‹)
  0x8C	0x0152	LATIN CAPITAL LIGATURE OE (Œ)
  0x8E	0x017D	LATIN CAPITAL LETTER Z WITH CARON (Ž)
  0x91	0x2018	LEFT SINGLE QUOTATION MARK (‘)
  0x92	0x2019	RIGHT SINGLE QUOTATION MARK (’)
  0x93	0x201C	LEFT DOUBLE QUOTATION MARK (“)
  0x94	0x201D	RIGHT DOUBLE QUOTATION MARK (”)
  0x95	0x2022	BULLET (•)
  0x96	0x2013	EN DASH (–)
  0x97	0x2014	EM DASH (—)
  0x98	0x02DC	SMALL TILDE (˜)
  0x99	0x2122	TRADE MARK SIGN (™)
  0x9A	0x0161	LATIN SMALL LETTER S WITH CARON (š)
  0x9B	0x203A	SINGLE RIGHT-POINTING ANGLE QUOTATION MARK (›)
  0x9C	0x0153	LATIN SMALL LIGATURE OE (œ)
  0x9E	0x017E	LATIN SMALL LETTER Z WITH CARON (ž)
  0x9F	0x0178	LATIN CAPITAL LETTER Y WITH DIAERESIS (Ÿ)

Set the temporary buffer to the empty string. Append a
code point equal to the character reference code to
the temporary buffer. Flush code points consumed as a
character reference. Switch to the return state.

13.2.6 Tree construction

The input to the tree construction stage is a sequence of tokens from the
tokenization stage. The tree construction stage is associated with a DOM
Document object when a parser is created. The «output» of this stage consists of
dynamically modifying or extending that document’s DOM tree.

This specification does not define when an interactive user agent has to render the
Document so that it is available to the user, or when it has to begin accepting user
input.

As each token is emitted from the tokenizer, the user agent must follow the appropriate steps
from the following list, known as the tree construction dispatcher:

If the stack of open elements is empty

If the adjusted current node is an element in the HTML namespace

If the adjusted current node is a MathML text integration point and the token is a start tag whose tag name is neither «mglyph» nor «malignmark»

If the adjusted current node is a MathML text integration point and the token is a character token

If the adjusted current node is a MathML annotation-xml element and the token is a start tag whose tag name is «svg»

If the adjusted current node is an HTML integration point and the token is a start tag

If the adjusted current node is an HTML integration point and the token is a character token

If the token is an end-of-file token

Process the token according to the rules given in the section corresponding to the current
insertion mode in HTML content.

Otherwise

Process the token according to the rules given in the section for parsing tokens in foreign content.

The next token is the token that is about to be processed by the tree
construction dispatcher (even if the token is subsequently just ignored).

A node is a MathML text integration point if it is one of the following
elements:

• A MathML mi element
• A MathML mo element
• A MathML mn element
• A MathML ms element
• A MathML mtext element

A node is an HTML integration point if it is one of the following elements:

• A MathML annotation-xml element whose start tag token had an
  attribute with the name «encoding» whose value was an ASCII case-insensitive match
  for the string «text/html«
• A MathML annotation-xml element whose start tag token had an
  attribute with the name «encoding» whose value was an ASCII case-insensitive match
  for the string «application/xhtml+xml«
• An SVG foreignObject element
• An SVG desc element
• An SVG title element

If the node in question is the context element passed to the HTML fragment
parsing algorithm, then the start tag token for that element is the «fake» token created
during by that HTML fragment parsing algorithm.

Not all of the tag names mentioned below are conformant tag names in this
specification; many are included to handle legacy content. They still form part of the algorithm
that implementations are required to implement to claim conformance.

The algorithm described below places no limit on the depth of the DOM tree
generated, or on the length of tag names, attribute names, attribute values, Text
nodes, etc. While implementers are encouraged to avoid arbitrary limits, it is
recognized that practical concerns will likely force user agents to impose nesting depth
constraints.

13.2.6.1 Creating and inserting nodes

While the parser is processing a token, it can enable or disable foster parenting. This affects the following algorithm.

The appropriate place for inserting a node, optionally using a particular
override target, is the position in an element returned by running the following steps:

1. If there was an override target specified, then let target be the
   override target.

   Otherwise, let target be the current node.

2. Determine the adjusted insertion location using the first matching steps
   from the following list:

   If foster parenting is enabled and target is a table, tbody, tfoot,
   thead, or tr element

   Foster parenting happens when content is misnested in tables.

   Run these substeps:

   1. Let last template be the last template element in the
      stack of open elements, if any.

   2. Let last table be the last table element in the
      stack of open elements, if any.

   3. If there is a last template and either there is no last table, or there is one, but last template is lower
      (more recently added) than last table in the stack of open
      elements, then: let adjusted insertion location be inside last template‘s template contents, after its last child (if any),
      and abort these steps.

   4. If there is no last table, then let adjusted insertion
      location be inside the first element in the stack of open elements (the
      html element), after its last child (if any), and abort these steps.
      (fragment case)

   5. If last table has a parent node, then let adjusted insertion location be inside last table‘s parent
      node, immediately before last table, and abort these steps.

   6. Let previous element be the element immediately above last table in the stack of open elements.

   7. Let adjusted insertion location be inside previous
      element, after its last child (if any).

   These steps are involved in part because it’s possible for elements, the
   table element in this case in particular, to have been moved by a script around
   in the DOM, or indeed removed from the DOM entirely, after the element was inserted by the
   parser.

   Otherwise

   Let adjusted insertion location be inside target,
   after its last child (if any).

3. If the adjusted insertion location is inside a template
   element, let it instead be inside the template element’s template
   contents, after its last child (if any).

4. Return the adjusted insertion location.

When the steps below require the UA to create an
element for a token in a particular given namespace and with a
particular intended parent, the UA must run the following steps:

1. If the active speculative HTML parser is not null, then return the result of
   creating a speculative mock element
   given given namespace, the tag name of the given token, and the attributes of the
   given token.

2. Otherwise, optionally create a speculative mock element given given
   namespace, the tag name of the given token, and the attributes of the given token.

   The result is not used. This step allows for a speculative fetch to
   be initiated from non-speculative parsing. The fetch is still speculative at this point,
   because, for example, by the time the element is inserted, intended parent might
   have been removed from the document.

3. Let document be intended parent‘s node document.

4. Let local name be the tag name of the token.

5. Let is be the value of the «is» attribute in the
   given token, if such an attribute exists, or null otherwise.

6. Let definition be the result of looking up a custom element definition given document, given
   namespace, local name, and is.

7. If definition is non-null and the parser was not created as part of the
   HTML fragment parsing algorithm, then let will execute script be true.
   Otherwise, let it be false.

8. If will execute script is true, then:

   1. Increment document‘s throw-on-dynamic-markup-insertion
      counter.

   2. If the JavaScript execution context stack is empty, then perform a
      microtask checkpoint.

   3. Push a new element queue onto document‘s relevant
      agent’s custom element reactions stack.

9. Let element be the result of creating an
   element given document, localName, given
   namespace, null, and is. If will execute script is true, set the
   synchronous custom elements flag; otherwise, leave it unset.

   This will cause custom element
   constructors to run, if will execute script is true. However, since we
   incremented the throw-on-dynamic-markup-insertion counter, this cannot cause new characters to be inserted into the tokenizer, or the document to be blown away.

10. Append each attribute in the given
    token to element.

    This can enqueue a custom element callback reaction for the
    attributeChangedCallback, which might run immediately (in the next
    step).

    Even though the is attribute governs the creation of a customized built-in element, it is
    not present during the execution of the relevant custom element constructor; it is
    appended in this step, along with all other attributes.

11. If will execute script is true, then:

    1. Let queue be the result of popping from document‘s relevant
       agent’s custom element reactions stack. (This will be the same
       element queue as was pushed above.)

    2. Invoke custom element reactions in queue.

    3. Decrement document‘s throw-on-dynamic-markup-insertion
       counter.

12. If element has an xmlns attribute in the XMLNS
    namespace whose value is not exactly the same as the element’s namespace, that is a
    parse error. Similarly, if element has an xmlns:xlink attribute in the XMLNS namespace whose value is not the
    XLink Namespace, that is a parse error.

13. If element is a resettable element, invoke
    its reset algorithm. (This initializes the
    element’s value and checkedness based on the element’s attributes.)

14. If element is a form-associated element and not a
    form-associated custom element, the
    form element pointer is not null, there is no
    template element on the stack of open elements, element is
    either not listed or doesn’t have a form attribute, and the intended parent is in the same
    tree as the element pointed to by the form element
    pointer, then associate element
    with the form element pointed to by the form element
    pointer and set element‘s parser inserted flag.

15. Return element.

When the steps below require the user agent to insert a foreign element for a token
in a given namespace, the user agent must run these steps:

1. Let the adjusted insertion location be the appropriate place for
   inserting a node.

2. Let element be the result of creating an element for the token in the given namespace, with the intended
   parent being the element in which the adjusted insertion location finds
   itself.

3. If it is possible to insert element at the adjusted insertion location,
   then:

   1. If the parser was not created as part of the HTML fragment parsing
      algorithm, then push a new element queue onto element‘s
      relevant agent’s custom element reactions stack.

   2. Insert element at the adjusted insertion location.

   3. If the parser was not created as part of the HTML fragment parsing
      algorithm, then pop the element queue from element‘s
      relevant agent’s custom element reactions stack, and invoke
      custom element reactions in that queue.

   If the adjusted insertion location cannot accept more
   elements, e.g. because it’s a Document that already has an element child, then
   element is dropped on the floor.

4. Push element onto the stack of open elements so that it is the new
   current node.

5. Return element.

When the steps below require the user agent to insert an HTML element for a token,
the user agent must insert a foreign element for the token, in the HTML
namespace.

When the steps below require the user agent to adjust MathML attributes for a token,
then, if the token has an attribute named definitionurl, change its name to
definitionURL (note the case difference).

When the steps below require the user agent to adjust SVG attributes for a token,
then, for each attribute on the token whose attribute name is one of the ones in the first column
of the following table, change the attribute’s name to the name given in the corresponding cell in
the second column. (This fixes the case of SVG attributes that are not all lowercase.)

When the steps below require the user agent to adjust foreign attributes for a
token, then, if any of the attributes on the token match the strings given in the first column of
the following table, let the attribute be a namespaced attribute, with the prefix being the string
given in the corresponding cell in the second column, the local name being the string given in the
corresponding cell in the third column, and the namespace being the namespace given in the
corresponding cell in the fourth column. (This fixes the use of namespaced attributes, in
particular lang attributes in the XML
namespace.)

When the steps below require the user agent to insert a character while processing a
token, the user agent must run the following steps:

1. Let data be the characters passed to the algorithm, or, if no
   characters were explicitly specified, the character of the character token being
   processed.

2. Let the adjusted insertion location be the appropriate
   place for inserting a node.

3. If the adjusted insertion location is in a Document node,
   then return.

   The DOM will not let Document nodes have Text node
   children, so they are dropped on the floor.

4. If there is a Text node immediately before the adjusted insertion
   location, then append data to that Text node’s data.

   Otherwise, create a new Text node whose data is data and
   whose node document is the same as that of the
   element in which the adjusted insertion location finds itself, and insert
   the newly created node at the adjusted insertion location.

A<script>
var script = document.getElementsByTagName('script')[0];
document.body.removeChild(script);
</script>B

A<script>
var text = document.createTextNode('B');
document.body.appendChild(text);
</script>C

A<script>
var text = document.getElementsByTagName('script')[0].firstChild;
text.data = 'B';
document.body.appendChild(text);
</script>C

A<table>B<tr>C</tr>D</table>

A<table><tr> B</tr> C</table>

A<table><tr> B</tr> </em>C</table>

When the steps below require the user agent to while processing a
comment token, optionally with an explicitly insertion position position, the
user agent must run the following steps:

1. Let data be the data given in the comment token being
   processed.

2. If position was specified, then let the adjusted
   insertion location be position. Otherwise, let adjusted
   insertion location be the appropriate place for inserting a node.

3. Create a Comment node whose data attribute is set to
   data and whose node document is
   the same as that of the node in which the adjusted insertion location finds
   itself.

4. Insert the newly created node at the adjusted insertion
   location.

DOM mutation events must not fire for changes caused by the UA
parsing the document. This includes the parsing of any content inserted using document.write() and document.writeln() calls. [UIEVENTS]

However, mutation observers do fire, as required by DOM
.

13.2.6.2 Parsing elements that contain only text

The generic raw text element parsing algorithm and the generic RCDATA element
parsing algorithm consist of the following steps. These algorithms are always invoked in
response to a start tag token.

1. Insert an HTML element for the token.

2. If the algorithm that was invoked is the generic raw text element parsing
   algorithm, switch the tokenizer to the RAWTEXT state; otherwise the algorithm
   invoked was the generic RCDATA element parsing algorithm, switch the tokenizer to
   the RCDATA state.

3. Let the original insertion mode be the current insertion
   mode.

4. Then, switch the insertion mode to «text».

13.2.6.3 Closing elements that have implied end tags

When the steps below require the UA to generate implied end tags, then, while the
current node is a dd element, a dt element, an
li element, an optgroup element, an option element, a
p element, an rb element, an rp element, an rt
element, or an rtc element, the UA must pop the current node off the
stack of open elements.

If a step requires the UA to generate implied end tags but lists an element to exclude from the
process, then the UA must perform the above steps as if that element was not in the above
list.

When the steps below require the UA to generate all implied end tags thoroughly,
then, while the current node is a caption element, a
colgroup element, a dd element, a dt element, an
li element, an optgroup element, an option element, a
p element, an rb element, an rp element, an rt
element, an rtc element, a tbody element, a td element, a
tfoot element, a th element, a thead element, or a
tr element, the UA must pop the current node off the
stack of open elements.

13.2.6.4 The rules for parsing tokens in HTML content

13.2.6.4.1 The «initial» insertion mode

A Document object has an associated parser cannot change the mode flag
(a boolean). It is initially false.

When the user agent is to apply the rules for the «initial» insertion mode, the user agent must handle the token as
follows:

A character token that is one of U+0009 CHARACTER
TABULATION, U+000A LINE FEED (LF), U+000C FORM FEED (FF),
U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

Ignore the token.

A comment token

Insert a comment as the last child of the Document object.

A DOCTYPE token

If the DOCTYPE token’s name is not «html«, or the token’s public
identifier is not missing, or the token’s system identifier is neither missing nor
«about:legacy-compat«, then there is a parse error.

Append a DocumentType node to the Document node, with its name set to the name given in the DOCTYPE token, or the
empty string if the name was missing; its public
ID set to the public identifier given in the DOCTYPE token, or the empty string if the
public identifier was missing; and its system ID
set to the system identifier given in the DOCTYPE token, or the empty string if the system
identifier was missing.

This also ensures that the DocumentType node is returned as the
value of the doctype attribute of the
Document object.

Then, if the document is not an iframe
srcdoc document, and the parser cannot
change the mode flag is false, and the DOCTYPE token matches one of the conditions in the
following list, then set the Document to quirks mode:

• The force-quirks flag is set to on.
• The name is not «html«.
• The public identifier is set to: «-//W3O//DTD W3 HTML Strict 3.0//EN//»
• The public identifier is set to: «-/W3C/DTD HTML 4.0 Transitional/EN»
• The public identifier is set to: «HTML»
• The system identifier is set to: «http://www.ibm.com/data/dtd/v11/ibmxhtml1-transitional.dtd»
• The public identifier starts with: «+//Silmaril//dtd html Pro v0r11 19970101//»
• The public identifier starts with: «-//AS//DTD HTML 3.0 asWedit + extensions//»
• The public identifier starts with: «-//AdvaSoft Ltd//DTD HTML 3.0 asWedit + extensions//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0 Level 1//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0 Level 2//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0 Strict Level 1//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0 Strict Level 2//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0 Strict//»
• The public identifier starts with: «-//IETF//DTD HTML 2.0//»
• The public identifier starts with: «-//IETF//DTD HTML 2.1E//»
• The public identifier starts with: «-//IETF//DTD HTML 3.0//»
• The public identifier starts with: «-//IETF//DTD HTML 3.2 Final//»
• The public identifier starts with: «-//IETF//DTD HTML 3.2//»
• The public identifier starts with: «-//IETF//DTD HTML 3//»
• The public identifier starts with: «-//IETF//DTD HTML Level 0//»
• The public identifier starts with: «-//IETF//DTD HTML Level 1//»
• The public identifier starts with: «-//IETF//DTD HTML Level 2//»
• The public identifier starts with: «-//IETF//DTD HTML Level 3//»
• The public identifier starts with: «-//IETF//DTD HTML Strict Level 0//»
• The public identifier starts with: «-//IETF//DTD HTML Strict Level 1//»
• The public identifier starts with: «-//IETF//DTD HTML Strict Level 2//»
• The public identifier starts with: «-//IETF//DTD HTML Strict Level 3//»
• The public identifier starts with: «-//IETF//DTD HTML Strict//»
• The public identifier starts with: «-//IETF//DTD HTML//»
• The public identifier starts with: «-//Metrius//DTD Metrius Presentational//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 2.0 HTML Strict//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 2.0 HTML//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 2.0 Tables//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 3.0 HTML Strict//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 3.0 HTML//»
• The public identifier starts with: «-//Microsoft//DTD Internet Explorer 3.0 Tables//»
• The public identifier starts with: «-//Netscape Comm. Corp.//DTD HTML//»
• The public identifier starts with: «-//Netscape Comm. Corp.//DTD Strict HTML//»
• The public identifier starts with: «-//O'Reilly and Associates//DTD HTML 2.0//»
• The public identifier starts with: «-//O'Reilly and Associates//DTD HTML Extended 1.0//»
• The public identifier starts with: «-//O'Reilly and Associates//DTD HTML Extended Relaxed 1.0//»
• The public identifier starts with: «-//SQ//DTD HTML 2.0 HoTMetaL + extensions//»
• The public identifier starts with: «-//SoftQuad Software//DTD HoTMetaL PRO 6.0::19990601::extensions to HTML 4.0//»
• The public identifier starts with: «-//SoftQuad//DTD HoTMetaL PRO 4.0::19971010::extensions to HTML 4.0//»
• The public identifier starts with: «-//Spyglass//DTD HTML 2.0 Extended//»
• The public identifier starts with: «-//Sun Microsystems Corp.//DTD HotJava HTML//»
• The public identifier starts with: «-//Sun Microsystems Corp.//DTD HotJava Strict HTML//»
• The public identifier starts with: «-//W3C//DTD HTML 3 1995-03-24//»
• The public identifier starts with: «-//W3C//DTD HTML 3.2 Draft//»
• The public identifier starts with: «-//W3C//DTD HTML 3.2 Final//»
• The public identifier starts with: «-//W3C//DTD HTML 3.2//»
• The public identifier starts with: «-//W3C//DTD HTML 3.2S Draft//»
• The public identifier starts with: «-//W3C//DTD HTML 4.0 Frameset//»
• The public identifier starts with: «-//W3C//DTD HTML 4.0 Transitional//»
• The public identifier starts with: «-//W3C//DTD HTML Experimental 19960712//»
• The public identifier starts with: «-//W3C//DTD HTML Experimental 970421//»
• The public identifier starts with: «-//W3C//DTD W3 HTML//»
• The public identifier starts with: «-//W3O//DTD W3 HTML 3.0//»
• The public identifier starts with: «-//WebTechs//DTD Mozilla HTML 2.0//»
• The public identifier starts with: «-//WebTechs//DTD Mozilla HTML//»
• The system identifier is missing and the public identifier starts with: «-//W3C//DTD HTML 4.01 Frameset//»
• The system identifier is missing and the public identifier starts with: «-//W3C//DTD HTML 4.01 Transitional//»

Otherwise, if the document is not an iframe srcdoc document, and the parser cannot change
the mode flag is false, and the DOCTYPE token matches one of the conditions in the
following list, then then set the Document to limited-quirks mode:

• The public identifier starts with: «-//W3C//DTD XHTML 1.0 Frameset//»
• The public identifier starts with: «-//W3C//DTD XHTML 1.0 Transitional//»
• The system identifier is not missing and the public identifier starts with: «-//W3C//DTD HTML 4.01 Frameset//»
• The system identifier is not missing and the public identifier starts with: «-//W3C//DTD HTML 4.01 Transitional//»

The system identifier and public identifier strings must be compared to the values given in
the lists above in an ASCII case-insensitive manner. A system identifier whose
value is the empty string is not considered missing for the purposes of the conditions
above.

Then, switch the insertion mode to «before html».

Anything else

If the document is not an iframe srcdoc document, then this is a parse
error; if the parser cannot change the mode flag is false, set the
Document to quirks mode.

In any case, switch the insertion mode to «before html», then reprocess the token.

13.2.6.4.2 The «before html» insertion mode

When the user agent is to apply the rules for the «before html» insertion mode, the user agent must handle the token as
follows:

A DOCTYPE token

Parse error. Ignore the token.

A comment token

Insert a comment as the last child of the Document object.

A character token that is one of U+0009 CHARACTER TABULATION, U+000A LINE FEED (LF), U+000C
FORM FEED (FF), U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

Ignore the token.

A start tag whose tag name is «html»

Create an element for the token in the HTML namespace, with the
Document as the intended parent. Append it to the Document object. Put
this element in the stack of open elements.

Switch the insertion mode to «before
head».

An end tag whose tag name is one of: «head», «body», «html», «br»

Act as described in the «anything else» entry below.

Any other end tag

Parse error. Ignore the token.

Anything else

Create an html element whose node document is the Document object. Append
it to the Document object. Put this element in the stack of open
elements.

Switch the insertion mode to «before
head», then reprocess the token.

The document element can end up being removed from the Document
object, e.g. by scripts; nothing in particular happens in such cases, content continues being
appended to the nodes as described in the next section.

13.2.6.4.3 The «before head» insertion mode

When the user agent is to apply the rules for the «before head» insertion mode, the user agent must handle the token as
follows:

A character token that is one of U+0009 CHARACTER
TABULATION, U+000A LINE FEED (LF), U+000C FORM FEED (FF),
U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

Ignore the token.

A comment token

Insert a comment.

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «html»

Process the token using the rules for the «in body» insertion mode.

A start tag whose tag name is «head»

Insert an HTML element for the token.

Set the head element pointer to the newly created
head element.

Switch the insertion mode to «in
head».

An end tag whose tag name is one of: «head», «body», «html», «br»

Act as described in the «anything else» entry below.

Any other end tag

Parse error. Ignore the token.

Anything else

Insert an HTML element for a «head» start tag token with no attributes.

Set the head element pointer to the newly created
head element.

Switch the insertion mode to «in
head».

Reprocess the current token.

13.2.6.4.4 The «in head» insertion mode

When the user agent is to apply the rules for the «in
head» insertion mode, the user agent must handle the token as follows:

A character token that is one of U+0009 CHARACTER
TABULATION, U+000A LINE FEED (LF), U+000C FORM FEED (FF),
U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

Insert the character.

A comment token

Insert a comment.

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «html»

Process the token using the rules for the «in body» insertion mode.

A start tag whose tag name is one of: «base», «basefont»,
«bgsound», «link»

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

A start tag whose tag name is «meta»

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

If the active speculative HTML parser is null, then:

1. If the element has a charset attribute, and getting an encoding from
   its value results in an encoding, and the
   confidence is currently tentative,
   then change the encoding to the resulting encoding.

2. Otherwise, if the element has an http-equiv
   attribute whose value is an ASCII case-insensitive match for the string «Content-Type«, and the element has a content attribute, and applying the algorithm for
   extracting a character encoding from a meta element to that attribute’s
   value returns an encoding, and the
   confidence is currently tentative,
   then change the encoding to the extracted encoding.

The speculative HTML parser doesn’t speculatively apply character
encoding declarations in order to reduce implementation complexity.

A start tag whose tag name is «title»

Follow the generic RCDATA element parsing algorithm.

A start tag whose tag name is «noscript», if the scripting flag is enabled

A start tag whose tag name is one of: «noframes», «style»

Follow the generic raw text element parsing algorithm.

A start tag whose tag name is «noscript», if the scripting flag is disabled

Insert an HTML element for the token.

Switch the insertion mode to «in
head noscript».

A start tag whose tag name is «script»

Run these steps:

1. Let the adjusted insertion location be the appropriate place
   for inserting a node.

2. Create an element for the token in the HTML namespace, with
   the intended parent being the element in which the adjusted insertion
   location finds itself.

3. Set the element’s parser document to the Document, and set the
   element’s force async to false.

   This ensures that, if the script is external, any document.write() calls in the script will execute in-line,
   instead of blowing the document away, as would happen in most other cases. It also prevents
   the script from executing until the end tag is seen.

4. If the parser was created as part of the HTML fragment parsing algorithm,
   then set the script element’s already started to true.
   (fragment case)

5. If the parser was invoked via the document.write() or document.writeln() methods, then optionally set the
   script element’s already started to true. (For example, the user
   agent might use this clause to prevent execution of cross-origin
   scripts inserted via document.write() under slow
   network conditions, or when the page has already taken a long time to load.)

6. Insert the newly created element at the adjusted insertion
   location.

7. Push the element onto the stack of open elements so that it is the new
   current node.

8. Switch the tokenizer to the script data state.

9. Let the original insertion mode be the current insertion
   mode.

10. Switch the insertion mode to «text».

An end tag whose tag name is «head»

Pop the current node (which will be the head element) off the
stack of open elements.

Switch the insertion mode to «after
head».

An end tag whose tag name is one of: «body», «html», «br»

Act as described in the «anything else» entry below.

A start tag whose tag name is «template»

Insert an HTML element for the token.

Insert a marker at the end of the list of
active formatting elements.

Set the frameset-ok flag to «not ok».

Switch the insertion mode to «in
template».

Push «in template» onto the stack of
template insertion modes so that it is the new current template insertion
mode.

An end tag whose tag name is «template»

If there is no template element on the stack of open elements, then
this is a parse error; ignore the token.

Otherwise, run these steps:

1. Generate all implied end tags thoroughly.

2. If the current node is not a template element, then this is a
   parse error.

3. Pop elements from the stack of open elements until a template
   element has been popped from the stack.

4. Clear the list of active formatting elements up to the last marker.

5. Pop the current template insertion mode off the stack of template
   insertion modes.

6. Reset the insertion mode appropriately.

A start tag whose tag name is «head»

Any other end tag

Parse error. Ignore the token.

Anything else

Pop the current node (which will be the head element) off the
stack of open elements.

Switch the insertion mode to «after
head».

Reprocess the token.

13.2.6.4.5 The «in head noscript» insertion mode

When the user agent is to apply the rules for the «in head noscript» insertion mode, the user agent must handle the
token as follows:

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «html»

Process the token using the rules for the «in body» insertion mode.

An end tag whose tag name is «noscript»

Pop the current node (which will be a noscript element) from the
stack of open elements; the new current node will be a
head element.

Switch the insertion mode to «in
head».

A character token that is one of U+0009 CHARACTER TABULATION, U+000A LINE FEED (LF), U+000C
FORM FEED (FF), U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

A comment token

A start tag whose tag name is one of: «basefont», «bgsound», «link», «meta», «noframes»,
«style»

Process the token using the rules for the «in head» insertion mode.

An end tag whose tag name is «br»

Act as described in the «anything else» entry below.

A start tag whose tag name is one of: «head», «noscript»

Any other end tag

Parse error. Ignore the token.

Anything else

Parse error.

Pop the current node (which will be a noscript element) from the
stack of open elements; the new current node will be a
head element.

Switch the insertion mode to «in
head».

Reprocess the token.

13.2.6.4.6 The «after head» insertion mode

When the user agent is to apply the rules for the «after head» insertion mode, the user agent must handle the token as
follows:

A character token that is one of U+0009 CHARACTER
TABULATION, U+000A LINE FEED (LF), U+000C FORM FEED (FF),
U+000D CARRIAGE RETURN (CR), or U+0020 SPACE

Insert the character.

A comment token

Insert a comment.

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «html»

Process the token using the rules for the «in body» insertion mode.

A start tag whose tag name is «body»

Insert an HTML element for the token.

Set the frameset-ok flag to «not ok».

Switch the insertion mode to «in
body».

A start tag whose tag name is «frameset»

Insert an HTML element for the token.

Switch the insertion mode to «in
frameset».

A start tag whose tag name is one of: «base», «basefont», «bgsound», «link», «meta»,
«noframes», «script», «style», «template», «title»

Parse error.

Push the node pointed to by the head element pointer onto
the stack of open elements.

Process the token using the rules for the «in head» insertion mode.

Remove the node pointed to by the head element pointer
from the stack of open elements. (It might not be the current node at
this point.)

The head element pointer cannot be null at
this point.

An end tag whose tag name is «template»

Process the token using the rules for the «in head» insertion mode.

An end tag whose tag name is one of: «body», «html», «br»

Act as described in the «anything else» entry below.

A start tag whose tag name is «head»

Any other end tag

Parse error. Ignore the token.

Anything else

Insert an HTML element for a «body» start tag token with no attributes.

Switch the insertion mode to «in
body».

Reprocess the current token.

13.2.6.4.7 The «in body» insertion mode

When the user agent is to apply the rules for the «in
body» insertion mode, the user agent must handle the token as follows:

A character token that is U+0000 NULL

Parse error. Ignore the token.

A character token that is one of U+0009 CHARACTER TABULATION,
U+000A LINE FEED (LF), U+000C FORM FEED (FF), U+000D CARRIAGE
RETURN (CR), or U+0020 SPACE

Reconstruct the active formatting elements, if any.

Insert the token’s character.

Any other character token

Reconstruct the active formatting elements, if any.

Insert the token’s character.

Set the frameset-ok flag to «not ok».

A comment token

Insert a comment.

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «html»

Parse error.

If there is a template element on the stack of open elements, then
ignore the token.

Otherwise, for each attribute on the token, check to see if the attribute is already present
on the top element of the stack of open elements. If it is not, add the attribute
and its corresponding value to that element.

A start tag whose tag name is one of: «base», «basefont», «bgsound», «link», «meta»,
«noframes», «script», «style», «template», «title»

An end tag whose tag name is «template»

Process the token using the rules for the «in head» insertion mode.

A start tag whose tag name is «body»

Parse error.

If the second element on the stack of open elements is not a body
element, if the stack of open elements has only one node on it, or if there is a
template element on the stack of open elements, then ignore the token.
(fragment case)

Otherwise, set the frameset-ok flag to «not ok»; then, for each attribute on the
token, check to see if the attribute is already present on the body element (the
second element) on the stack of open elements, and if it is not, add the attribute
and its corresponding value to that element.

A start tag whose tag name is «frameset»

Parse error.

If the stack of open elements has only one node on it, or if the second element
on the stack of open elements is not a body element, then ignore the
token. (fragment case)

If the frameset-ok flag is set to «not ok», ignore the token.

Otherwise, run the following steps:

1. Remove the second element on the stack of open elements from its parent
   node, if it has one.

2. Pop all the nodes from the bottom of the stack of open elements, from the
   current node up to, but not including, the root html element.

3. Insert an HTML element for the token.

4. Switch the insertion mode to «in
   frameset».

An end-of-file token

If the stack of template insertion modes is not empty, then process the token
using the rules for the «in
template» insertion mode.

Otherwise, follow these steps:

1. If there is a node in the stack of open elements that is not either a
   dd element, a dt element, an li element, an
   optgroup element, an option element, a p element, an
   rb element, an rp element, an rt element, an
   rtc element, a tbody element, a td element, a
   tfoot element, a th element, a thead element, a
   tr element, the body element, or the html element, then
   this is a parse error.

2. Stop parsing.

An end tag whose tag name is «body»

If the stack of open elements does not have a body element in scope, this is a parse error;
ignore the token.

Otherwise, if there is a node in the stack of open elements that is not either a
dd element, a dt element, an li element, an
optgroup element, an option element, a p element, an
rb element, an rp element, an rt element, an
rtc element, a tbody element, a td element, a
tfoot element, a th element, a thead element, a
tr element, the body element, or the html element, then
this is a parse error.

Switch the insertion mode to «after
body».

An end tag whose tag name is «html»

If the stack of open elements does not have a body element in scope, this is a parse error;
ignore the token.

Otherwise, if there is a node in the stack of open elements that is not either a
dd element, a dt element, an li element, an
optgroup element, an option element, a p element, an
rb element, an rp element, an rt element, an
rtc element, a tbody element, a td element, a
tfoot element, a th element, a thead element, a
tr element, the body element, or the html element, then
this is a parse error.

Switch the insertion mode to «after
body».

Reprocess the token.

A start tag whose tag name is one of: «address», «article», «aside», «blockquote», «center»,
«details», «dialog», «dir», «div», «dl», «fieldset», «figcaption», «figure», «footer», «header»,
«hgroup», «main», «menu», «nav», «ol», «p», «section», «summary», «ul»

If the stack of open elements has a
p element in button scope, then close a p
element.

Insert an HTML element for the token.

A start tag whose tag name is one of: «h1», «h2», «h3», «h4»,
«h5», «h6»

If the stack of open elements has a
p element in button scope, then close a p
element.

If the current node is an HTML element whose
tag name is one of «h1», «h2», «h3», «h4», «h5», or «h6», then this is a parse
error; pop the current node off the stack of open elements.

Insert an HTML element for the token.

A start tag whose tag name is one of: «pre», «listing»

If the stack of open elements has
a p element in button scope, then close a p
element.

Insert an HTML element for the token.

If the next token is a U+000A LINE FEED (LF) character token, then ignore that
token and move on to the next one. (Newlines at the start of pre blocks are ignored
as an authoring convenience.)

Set the frameset-ok flag to «not ok».

A start tag whose tag name is «form»

If the form element pointer is not null, and there is
no template element on the stack of open elements, then this is a
parse error; ignore the token.

Otherwise:

If the stack of open elements has
a p element in button scope, then close a p
element.

Insert an HTML element for the token, and, if there is no template
element on the stack of open elements, set the form element pointer to point to the element created.

A start tag whose tag name is «li»

Run these steps:

1. Set the frameset-ok flag to «not ok».

2. Initialize node to be the current
   node (the bottommost node of the stack).

3. Loop: If node is an li element, then run these
   substeps:

   1. Generate implied end tags, except for li elements.

   2. If the current node is not an li element, then this is a
      parse error.

   3. Pop elements from the stack of open elements until an li
      element has been popped from the stack.

   4. Jump to the step labeled done below.

4. If node is in the special category, but is not an
   address, div, or p element, then jump to the step
   labeled done below.

5. Otherwise, set node to the previous entry in the stack of open
   elements and return to the step labeled loop.

6. Done: If the stack of open elements has a p element in button scope, then close a
   p element.

7. Finally, insert an HTML element for the token.

A start tag whose tag name is one of: «dd», «dt»

Run these steps:

1. Set the frameset-ok flag to «not ok».

2. Initialize node to be the current
   node (the bottommost node of the stack).

3. Loop: If node is a dd element, then run these
   substeps:

   1. Generate implied end tags, except for dd elements.

   2. If the current node is not a dd element, then this is a
      parse error.

   3. Pop elements from the stack of open elements until a dd
      element has been popped from the stack.

   4. Jump to the step labeled done below.

4. If node is a dt element, then run these substeps:

   1. Generate implied end tags, except for dt elements.

   2. If the current node is not a dt element, then this is a
      parse error.

   3. Pop elements from the stack of open elements until a dt
      element has been popped from the stack.

   4. Jump to the step labeled done below.

5. If node is in the special category, but is not an
   address, div, or p element, then jump to the step
   labeled done below.

6. Otherwise, set node to the previous entry in the stack of open
   elements and return to the step labeled loop.

7. Done: If the stack of open elements has a p element in button scope, then close a
   p element.

8. Finally, insert an HTML element for the token.

A start tag whose tag name is «plaintext»

If the stack of open elements has a
p element in button scope, then close a p
element.

Insert an HTML element for the token.

Switch the tokenizer to the PLAINTEXT state.

Once a start tag with the tag name «plaintext» has been seen, that will be the
last token ever seen other than character tokens (and the end-of-file token), because there is
no way to switch out of the PLAINTEXT state.

A start tag whose tag name is «button»

1. If the stack of open elements has a
   button element in scope, then run these substeps:

   1. Parse error.

   2. Generate implied end tags.

   3. Pop elements from the stack of open elements until a button
      element has been popped from the stack.

2. Reconstruct the active formatting elements, if any.

3. Insert an HTML element for the token.

4. Set the frameset-ok flag to «not ok».

An end tag whose tag name is one of: «address», «article», «aside», «blockquote», «button»,
«center», «details», «dialog», «dir», «div», «dl», «fieldset», «figcaption», «figure», «footer»,
«header», «hgroup», «listing», «main», «menu», «nav», «ol», «pre», «section», «summary»,
«ul»

If the stack of open elements does not have an element in scope that is an HTML
element with the same tag name as that of the token, then this is a parse
error; ignore the token.

Otherwise, run these steps:

1. Generate implied end tags.

2. If the current node is not an HTML element with
   the same tag name as that of the token, then this is a
   parse error.

3. Pop elements from the stack of open elements until an HTML element with the same tag name as the token has been popped from the
   stack.

An end tag whose tag name is «form»

If there is no template element on the stack of open elements, then
run these substeps:

1. Let node be the element that the form
   element pointer is set to, or null if it is not set to an element.

2. Set the form element pointer to null.

3. If node is null or if the stack of open elements does
   not have node in scope, then
   this is a parse error; return and ignore the token.

4. Generate implied end tags.

5. If the current node is not node, then this is a
   parse error.

6. Remove node from the stack of open elements.

If there is a template element on the stack of open
elements, then run these substeps instead:

1. If the stack of open elements does not have a form element in scope, then this is a parse
   error; return and ignore the token.

2. Generate implied end tags.

3. If the current node is not a form element, then this is a
   parse error.

4. Pop elements from the stack of open elements until a form
   element has been popped from the stack.

An end tag whose tag name is «p»

If the stack of open elements does not have a p element in button scope, then this is a parse
error; insert an HTML element for a «p» start tag token with no
attributes.

Close a p element.

An end tag whose tag name is «li»

If the stack of open elements does not have an li element in list item scope, then this is a parse
error; ignore the token.

Otherwise, run these steps:

1. Generate implied end tags, except for li elements.

2. If the current node is not an li element, then this is a
   parse error.

3. Pop elements from the stack of open elements until an li
   element has been popped from the stack.

An end tag whose tag name is one of: «dd», «dt»

If the stack of open elements does not have an element in scope that is an HTML
element with the same tag name as that of the token, then this is a parse
error; ignore the token.

Otherwise, run these steps:

1. Generate implied end tags, except for HTML elements with the
   same tag name as the token.

2. If the current node is not an HTML
   element with the same tag name as that of the token, then this is a parse
   error.

3. Pop elements from the stack of open elements until an HTML element with the same tag name as the token has been popped from the
   stack.

An end tag whose tag name is one of: «h1», «h2», «h3», «h4», «h5», «h6»

If the stack of open elements does not have an element in scope that is an HTML
element and whose tag name is one of «h1», «h2», «h3», «h4», «h5», or «h6», then this is
a parse error; ignore the token.

Otherwise, run these steps:

1. Generate implied end tags.

2. If the current node is not an HTML
   element with the same tag name as that of the token, then this is a parse
   error.

3. Pop elements from the stack of open elements until an HTML element whose tag name is one of «h1», «h2», «h3», «h4», «h5», or «h6»
   has been popped from the stack.

An end tag whose tag name is «sarcasm»

Take a deep breath, then act as described in the «any other end
tag» entry below.

A start tag whose tag name is «a»

If the list of active formatting elements contains an a element
between the end of the list and the last marker on
the list (or the start of the list if there is no marker on the list), then this is a parse
error; run the adoption agency algorithm for the token, then remove that
element from the list of active formatting elements and the stack of open
elements if the adoption agency algorithm didn’t already remove it (it might
not have if the element is not in table
scope).

In the non-conforming stream
<a href="a">a<table><a href="b">b</table>x, the first
a element would be closed upon seeing the second one, and the «x» character would
be inside a link to «b», not to «a». This is despite the fact that the outer a
element is not in table scope (meaning that a regular </a> end tag at the start
of the table wouldn’t close the outer a element). The result is that the two
a elements are indirectly nested inside each other — non-conforming markup
will often result in non-conforming DOMs when parsed.

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token. Push onto the list of active
formatting elements that element.

A start tag whose tag name is one of: «b», «big», «code», «em»,
«font», «i», «s», «small», «strike», «strong», «tt», «u»

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token. Push onto the list of active
formatting elements that element.

A start tag whose tag name is «nobr»

Reconstruct the active formatting elements, if any.

If the stack of open elements has a
nobr element in scope, then this is a parse error; run the
adoption agency algorithm for the token, then once again reconstruct the
active formatting elements, if any.

Insert an HTML element for the token. Push onto the list of active
formatting elements that element.

An end tag whose tag name is one of: «a»,
«b», «big», «code», «em», «font», «i», «nobr», «s», «small»,
«strike», «strong», «tt», «u»

Run the adoption agency algorithm for the token.

A start tag whose tag name is one of: «applet», «marquee», «object»

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token.

Insert a marker at the end of the list of
active formatting elements.

Set the frameset-ok flag to «not ok».

An end tag token whose tag name is one of: «applet», «marquee», «object»

If the stack of open elements does not have an element in scope that is an HTML
element with the same tag name as that of the token, then this is a parse
error; ignore the token.

Otherwise, run these steps:

1. Generate implied end tags.

2. If the current node is not an HTML
   element with the same tag name as that of the token, then this is a parse
   error.

3. Pop elements from the stack of open elements until an HTML element with the same tag name as the token has been popped from the
   stack.

4. Clear the list of active formatting elements up to the last marker.

A start tag whose tag name is «table»

If the Document is not set to quirks mode, and the
stack of open elements has a
p element in button scope, then close a p
element.

Insert an HTML element for the token.

Set the frameset-ok flag to «not ok».

Switch the insertion mode to «in
table».

An end tag whose tag name is «br»

Parse error. Drop the attributes from the token, and act as described in the
next entry; i.e. act as if this was a «br» start tag token with no attributes, rather than the
end tag token that it actually is.

A start tag whose tag name is one of: «area», «br», «embed»,
«img», «keygen», «wbr»

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

Set the frameset-ok flag to «not ok».

A start tag whose tag name is «input»

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

If the token does not have an attribute with the name «type», or if it does, but that
attribute’s value is not an ASCII case-insensitive match for the string «hidden«, then: set the frameset-ok flag to «not ok».

A start tag whose tag name is one of: «param», «source», «track»

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

A start tag whose tag name is «hr»

If the stack of open elements has a
p element in button scope, then close a p
element.

Insert an HTML element for the token. Immediately pop the current
node off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

Set the frameset-ok flag to «not ok».

A start tag whose tag name is «image»

Parse error. Change the token’s tag name to «img» and reprocess it. (Don’t
ask.)

A start tag whose tag name is «textarea»

Run these steps:

1. Insert an HTML element for the token.

2. If the next token is a U+000A LINE FEED (LF) character token, then ignore
   that token and move on to the next one. (Newlines at the start of textarea
   elements are ignored as an authoring convenience.)

3. Switch the tokenizer to the RCDATA state.

4. Let the original insertion mode be the current insertion
   mode.

5. Set the frameset-ok flag to «not ok».

6. Switch the insertion mode to «text».

A start tag whose tag name is «xmp»

If the stack of open elements has a
p element in button scope, then close a p
element.

Reconstruct the active formatting elements, if any.

Set the frameset-ok flag to «not ok».

Follow the generic raw text element parsing algorithm.

A start tag whose tag name is «iframe»

Set the frameset-ok flag to «not ok».

Follow the generic raw text element parsing algorithm.

A start tag whose tag name is «noembed»

A start tag whose tag name is «noscript», if the scripting flag is enabled

Follow the generic raw text element parsing algorithm.

A start tag whose tag name is «select»

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token.

Set the frameset-ok flag to «not ok».

If the insertion mode is one of «in
table», «in caption», «in table body», «in row», or «in cell», then switch the
insertion mode to «in select in
table». Otherwise, switch the insertion mode to «in select».

A start tag whose tag name is one of: «optgroup», «option»

If the current node is an option element, then pop the
current node off the stack of open elements.

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token.

A start tag whose tag name is one of: «rb», «rtc»

If the stack of open elements has a
ruby element in scope, then generate implied end tags. If the
current node is not now a ruby element, this is a
parse error.

Insert an HTML element for the token.

A start tag whose tag name is one of: «rp», «rt»

If the stack of open elements has a
ruby element in scope, then generate implied end tags, except
for rtc elements. If the current node is not now a rtc
element or a ruby element, this is a parse error.

Insert an HTML element for the token.

A start tag whose tag name is «math»

Reconstruct the active formatting elements, if any.

Adjust MathML attributes for the token. (This fixes the case of MathML
attributes that are not all lowercase.)

Adjust foreign attributes for the token. (This fixes the use of namespaced
attributes, in particular XLink.)

Insert a foreign element for the token, in the MathML
namespace.

If the token has its self-closing flag set, pop the current node off the
stack of open elements and acknowledge
the token’s self-closing flag.

A start tag whose tag name is «svg»

Reconstruct the active formatting elements, if any.

Adjust SVG attributes for the token. (This fixes the case of SVG attributes that
are not all lowercase.)

Adjust foreign attributes for the token. (This fixes the use of namespaced
attributes, in particular XLink in SVG.)

Insert a foreign element for the token, in the SVG namespace.

If the token has its self-closing flag set, pop the current node off the
stack of open elements and acknowledge
the token’s self-closing flag.

A start tag whose tag name is one of: «caption», «col», «colgroup», «frame»,
«head», «tbody», «td», «tfoot», «th», «thead», «tr»

Parse error. Ignore the token.

Any other start tag

Reconstruct the active formatting elements, if any.

Insert an HTML element for the token.

This element will be an ordinary
element.

Any other end tag

Run these steps:

1. Initialize node to be the current node (the bottommost
   node of the stack).

2. Loop: If node is an HTML
   element with the same tag name as the token, then:

   1. Generate implied end tags, except for HTML elements with the
      same tag name as the token.

   2. If node is not the current node, then this is a
      parse error.

   3. Pop all the nodes from the current node up to node,
      including node, then stop these steps.

3. Otherwise, if node is in the special category, then
   this is a parse error; ignore the token, and return.

4. Set node to the previous entry in the stack of open
   elements.

5. Return to the step labeled loop.

When the steps above say the user agent is to close a p element, it
means that the user agent must run the following steps:

1. Generate implied end tags, except for p elements.

2. If the current node is not a p element, then this is a
   parse error.

3. Pop elements from the stack of open elements until a p element
   has been popped from the stack.

The adoption agency algorithm, which takes as its only argument
a token token for which the algorithm is being run, consists of the following
steps:

1. Let subject be token‘s tag name.

2. If the current node is an HTML element
   whose tag name is subject, and the current node is not in the
   list of active formatting elements, then pop the current node off the
   stack of open elements and return.

3. Let outer loop counter be 0.

4. While true:

   1. If outer loop counter is greater than or equal to 8, then return.

   2. Increment outer loop counter by 1.

   3. Let formatting element be the last element in the list of active
      formatting elements that:

      • is between the end of the list and the last marker in the list, if any, or the start of the list
        otherwise, and
      • has the tag name subject.

      If there is no such element, then return and instead act as described in the «any other end
      tag» entry above.

   4. If formatting element is not in the stack of open elements, then
      this is a parse error; remove the element from the list, and return.

   5. If formatting element is in the stack of open elements, but the
      element is not in scope, then this is a
      parse error; return.

   6. If formatting element is not the current node, this is a
      parse error. (But do not return.)

   7. Let furthest block be the topmost node in the stack of open
      elements that is lower in the stack than formatting element, and is an
      element in the special category. There might not be one.

   8. If there is no furthest block, then the UA must first pop all the nodes from
      the bottom of the stack of open elements, from the current node up to
      and including formatting element, then remove formatting element from the
      list of active formatting elements, and finally return.

   9. Let common ancestor be the element immediately above formatting
      element in the stack of open elements.

   10. Let a bookmark note the position of formatting element in the list of
       active formatting elements relative to the elements on either side of it in the
       list.

   11. Let node and last node be furthest block.

   12. Let inner loop counter be 0.

   13. While true:

       1. Increment inner loop counter by 1.

       2. Let node be the element immediately above node in the
          stack of open elements, or if node is no longer in the stack of
          open elements (e.g. because it got removed by this algorithm), the element that was immediately above node in
          the stack of open elements before node was removed.

       3. If node is formatting element, then break.

       4. If inner loop counter is greater than 3 and node is in the
          list of active formatting elements, then remove node from the
          list of active formatting elements.

       5. If node is not in the list of active
          formatting elements, then remove node from the stack of open
          elements and continue.

       6. Create an element for the token for which the element node was
          created, in the HTML namespace, with common ancestor as the intended
          parent; replace the entry for node in the list of active formatting
          elements with an entry for the new element, replace the entry for node in
          the stack of open elements with an entry for the new element, and let
          node be the new element.

       7. If last node is furthest block, then move the aforementioned
          bookmark to be immediately after the new node in the list of active
          formatting elements.

       8. Append last node to
          node.

       9. Set last node to node.

   14. Insert whatever last node ended up being in the previous step at the
       appropriate place for inserting a node, but using common
       ancestor as the override target.

   15. Create an element for the token for which formatting
       element was created, in the HTML namespace, with furthest
       block as the intended parent.

   16. Take all of the child nodes of furthest block and append them to the
       element created in the last step.

   17. Append that new element to furthest block.

   18. Remove formatting element from the list of active formatting
       elements, and insert the new element into the list of active formatting
       elements at the position of the aforementioned bookmark.

   19. Remove formatting element from the stack of open
       elements, and insert the new element into the stack of open elements
       immediately below the position of furthest block in that stack.

This algorithm’s name, the «adoption agency algorithm», comes from the way it
causes elements to change parents, and is in contrast with other possible algorithms for dealing
with misnested content.

13.2.6.4.8 The «text» insertion mode

When the user agent is to apply the rules for the «text» insertion mode, the user agent must handle the token as
follows:

A character token

Insert the token’s character.

This can never be a U+0000 NULL character; the tokenizer converts those to
U+FFFD REPLACEMENT CHARACTER characters.

An end-of-file token

Parse error.

If the current node is a script element, then set its already
started to true.

Pop the current node off the stack of open elements.

Switch the insertion mode to the original insertion mode and
reprocess the token.

An end tag whose tag name is «script»

If the active speculative HTML parser is null and the JavaScript execution
context stack is empty, then perform a microtask checkpoint.

Let script be the current node (which will be a
script element).

Pop the current node off the stack of open elements.

Switch the insertion mode to the original insertion mode.

Let the old insertion point have the same value as the current
insertion point. Let the insertion point be just before the next
input character.

Increment the parser’s script nesting level by one.

If the active speculative HTML parser is null, then prepare the script
element script. This might cause some script to execute, which might cause
new characters to be inserted into the tokenizer, and
might cause the tokenizer to output more tokens, resulting in a reentrant invocation of the parser.

Decrement the parser’s script nesting level by one. If the parser’s script
nesting level is zero, then set the parser pause flag to false.

Let the insertion point have the value of the old insertion
point. (In other words, restore the insertion point to its previous value.
This value might be the «undefined» value.)

At this stage, if the pending parsing-blocking
script is not null, then:

If the script nesting level is not zero:

Set the parser pause flag to true, and abort the processing of any nested
invocations of the tokenizer, yielding control back to the caller. (Tokenization will resume
when the caller returns to the «outer» tree construction stage.)

The tree construction stage of this particular parser is being called reentrantly, say from a call to document.write().

Otherwise:

While the pending parsing-blocking script is not null:

1. Let the script be the pending parsing-blocking
   script.

2. Set the pending parsing-blocking script to null.

3. Start the speculative HTML parser for this instance of the HTML
   parser.

4. Block the tokenizer for this instance of the
   HTML parser, such that the event loop will not run tasks that invoke the tokenizer.

5. If the parser’s Document has a style sheet that is blocking
   scripts or the script‘s ready to be parser-executed is false:
   spin the event loop until the parser’s Document has no style
   sheet that is blocking scripts and the script‘s ready to be
   parser-executed becomes true.

6. If this parser has been aborted in the meantime,
   return.

   This could happen if, e.g., while the spin the event loop
   algorithm is running, the Document gets destroyed, or the document.open()
   method gets invoked on the Document.

7. Stop the speculative HTML parser for this instance of the HTML
   parser.

8. Unblock the tokenizer for this instance of the
   HTML parser, such that tasks that invoke the
   tokenizer can again be run.

9. Let the insertion point be just before the next input
   character.

10. Increment the parser’s script nesting level by one (it should be zero
    before this step, so this sets it to one).

11. Execute the script element the script.

12. Decrement the parser’s script nesting level by one. If the parser’s
    script nesting level is zero (which it always should be at this point), then set
    the parser pause flag to false.

13. Let the insertion point be undefined again.

Any other end tag

Pop the current node off the stack of open elements.

Switch the insertion mode to the original insertion mode.

13.2.6.4.9 The «in table» insertion mode

When the user agent is to apply the rules for the «in
table» insertion mode, the user agent must handle the token as follows:

A character token, if the current node is table, tbody, template, tfoot, thead, or tr element

Let the pending table character
tokens be an empty list of tokens.

Let the original insertion mode be the current insertion mode.

Switch the insertion mode to «in
table text» and reprocess the token.

A comment token

Insert a comment.

A DOCTYPE token

Parse error. Ignore the token.

A start tag whose tag name is «caption»

Clear the stack back to a table context. (See below.)

Insert a marker at the end of the list of
active formatting elements.

Insert an HTML element for the token, then switch the insertion
mode to «in caption».

A start tag whose tag name is «colgroup»

Clear the stack back to a table context. (See below.)

Insert an HTML element for the token, then switch the insertion
mode to «in column group».

A start tag whose tag name is «col»

Clear the stack back to a table context. (See below.)

Insert an HTML element for a «colgroup» start tag token with no attributes, then
switch the insertion mode to «in
column group».

Reprocess the current token.

A start tag whose tag name is one of: «tbody», «tfoot», «thead»

Clear the stack back to a table context. (See below.)

Insert an HTML element for the token, then switch the insertion
mode to «in table body».

A start tag whose tag name is one of: «td», «th», «tr»

Clear the stack back to a table context. (See below.)

Insert an HTML element for a «tbody» start tag token with no attributes, then
switch the insertion mode to «in table
body».

Reprocess the current token.

A start tag whose tag name is «table»

Parse error.

If the stack of open elements does not have a table element in table scope, ignore the token.

Otherwise:

Pop elements from this stack until a table element has been popped from the
stack.

Reset the insertion mode appropriately.

Reprocess the token.

An end tag whose tag name is «table»

If the stack of open elements does not have a table element in table scope, this is a parse
error; ignore the token.

Otherwise:

Pop elements from this stack until a table element has been popped from the
stack.

Reset the insertion mode appropriately.

An end tag whose tag name is one of: «body», «caption», «col», «colgroup», «html», «tbody»,
«td», «tfoot», «th», «thead», «tr»

Parse error. Ignore the token.

A start tag whose tag name is one of: «style», «script», «template»

An end tag whose tag name is «template»

Process the token using the rules for the «in head» insertion
mode.

A start tag whose tag name is «input»

If the token does not have an attribute with the name «type», or if it does, but that
attribute’s value is not an ASCII case-insensitive match for the string «hidden«, then: act as described in the «anything else» entry below.

Otherwise:

Parse error.

Insert an HTML element for the token.

Pop that input element off the stack of open elements.

Acknowledge the token’s self-closing
flag, if it is set.

A start tag whose tag name is «form»

Parse error.

If there is a template element on the stack of open elements, or if
the form element pointer is not null, ignore the
token.

Otherwise:

Insert an HTML element for the token, and set the form element pointer to point to the element created.

Pop that form element off the stack of open elements.

An end-of-file token

Process the token using the rules for the «in body» insertion mode.

Anything else

Parse error. Enable foster parenting, process
the token using the rules for the «in
body» insertion mode, and then disable foster
parenting.

When the steps above require the UA to clear the stack back to a table context, it
means that the UA must, while the current node is not a table,
template, or html element, pop elements from the stack of open
elements.