Index: source
===================================================================
--- source	(revision 1330)
+++ source	(revision 1331)
@@ -40226,6 +40226,34 @@
     <p><span>Parse error</span>. Ignore the token.</p>
    </dd>
 
+   <dt>A start tag whose tag name is "input"</dt>
+
+   <dd>
+
+    <p>If the token does not have an attribute with the name "type",
+    or if it does, but that attribute's value is not a
+    case-insensitive <!-- XXX ASCII --> match for the string "hidden",
+    or, if the <span>current table</span> is <span>tainted</span>,
+    then: act as described in the "anything else" entry below.</p>
+
+    <p>Otherwise:</p>
+
+    <p><span>Parse error</span>.</p>
+
+    <p><span title="insert an html element">Insert an
+    <code>input</code> element</span> for the token.</p>
+
+    <p>If the <span><code title="">form</code> element
+    pointer</span> is not null, then <span>associate</span><!--XXX
+    xref! --> the <code>input</code> element with the
+    <code>form</code> element pointed to by the <span><code
+    title="">form</code> element pointer</span>.</p>
+
+    <p>Pop that <code>input</code> element off the <span>stack of
+    open elements</span>.</p>
+
+   </dd>
+
    <dt>Anything else</dt>
    <dd>