--- parser3/tests/186.html 2008/07/22 13:13:10 1.3 +++ parser3/tests/186.html 2013/12/29 18:39:00 1.5 @@ -1,4 +1,4 @@ -$request:charset[utf-8] +$request:charset[utf-8] $sValue[abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ 0123456789 @@ -15,18 +15,18 @@ Origin:
-$sEscapeValued[^sValue.js-escape[]] +$sEscapedValue[^sValue.js-escape[]] Escaped:
-=^taint[html][$sEscapeValued]=
+=^taint[html][$sEscapedValue]=
 

-$sUnescapedValue[^string:js-unescape[$sEscapeValued]] +$sUnescapedValue[^string:js-unescape[$sEscapedValue]] Unescaped [^if($sUnescapedValue eq $sValue){equal to source}{NOT equal to source}]:
-=^taint[html][$sUnescapedValue]=
+=$sUnescapedValue=
 
@@ -38,3 +38,13 @@ $s[$v] =^s.js-escape[]= =^string:js-unescape[$s]= + + +
+# replace %uXXXX to \uXXXX and check escaping again +$sEscapedValue2[^sEscapedValue.match[%u][gi]{\u}] +
+=^taint[html][$sEscapedValue2]=
+
+$sUnescapedValue2[^string:js-unescape[$sEscapedValue2]] +Unescaped [^if($sUnescapedValue2 eq $sValue){equal to source}{NOT equal to source}]