--- parser3/tests/186.html 2008/07/21 08:55:10 1.2 +++ parser3/tests/186.html 2010/07/13 05:12:28 1.4 @@ -1,4 +1,4 @@ -$request:charset[utf-8] +$request:charset[utf-8] $sValue[abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789 @@ -15,15 +15,15 @@ Origin:
-=^taint[html][$sEscapeValued]= +=^taint[html][$sEscapedValue]=
=^taint[html][$sUnescapedValue]= @@ -35,6 +35,16 @@ Empty string escape/unescape: $v[] $s[$v]-=^s.escape[]= -=^string:unescape[$s]= +=^s.js-escape[]= +=^string:js-unescape[$s]=+ + +
+# replace %uXXXX to \uXXXX and check escaping again +$sEscapedValue2[^sEscapedValue.match[%u][gi]{\u}] ++=^taint[html][$sEscapedValue2]= ++$sUnescapedValue2[^string:js-unescape[$sEscapedValue2]] +Unescaped [^if($sUnescapedValue2 eq $sValue){equal to source}{NOT equal to source}]