--- parser3/tests/186.html 2008/07/21 08:55:10 1.2 +++ parser3/tests/186.html 2013/12/29 18:39:00 1.5 @@ -1,4 +1,4 @@ -$request:charset[utf-8] +$request:charset[utf-8] $sValue[abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789 @@ -15,18 +15,18 @@ Origin:
-$sEscapeValued[^sValue.escape[]] +$sEscapedValue[^sValue.js-escape[]] Escaped:
-=^taint[html][$sEscapeValued]=
+=^taint[html][$sEscapedValue]=
 

-$sUnescapedValue[^string:unescape[$sEscapeValued]] +$sUnescapedValue[^string:js-unescape[$sEscapedValue]] Unescaped [^if($sUnescapedValue eq $sValue){equal to source}{NOT equal to source}]:
-=^taint[html][$sUnescapedValue]=
+=$sUnescapedValue=
 
@@ -35,6 +35,16 @@ Empty string escape/unescape: $v[] $s[$v]
-=^s.escape[]=
-=^string:unescape[$s]=
+=^s.js-escape[]=
+=^string:js-unescape[$s]=
 
+ + +
+# replace %uXXXX to \uXXXX and check escaping again +$sEscapedValue2[^sEscapedValue.match[%u][gi]{\u}] +
+=^taint[html][$sEscapedValue2]=
+
+$sUnescapedValue2[^string:js-unescape[$sEscapedValue2]] +Unescaped [^if($sUnescapedValue2 eq $sValue){equal to source}{NOT equal to source}]