Annotation of parser3/tests/462.html, revision 1.1
1.1 ! moko 1: # tuned js and json tainting
! 2: @main[]
! 3: js:
! 4: 1. quotes: ^apply-taint[js][^taint['single' "double"]]
! 5: 2. script end and comment: ^apply-taint[js][^taint[</script><!--x-->]]
! 6: 3. an entity, decoded in an attribute: ^apply-taint[js][^taint['^;]]
! 7: 4. backslash, line feed, carriage return: ^apply-taint[js][^taint[a\b^#0Ac^#0Dd]]
! 8: 5. line and paragraph separators: ^apply-taint[js][^taint[a^#E2^#80^#A8b^#E2^#80^#A9c]]
! 9: 6. cyrillic is kept: ^apply-taint[js][^taint[ัะตัั]]
! 10: 7. a broken utf-8 sequence does not hide a quote: ^raw_quote[^apply-taint[js][^taint[^#E2^#80"]]]
! 11:
! 12: @raw_quote[s]
! 13: $result[^if(^s.pos["]>=0){RAW QUOTE}{escaped}]
! 14:
! 15: # json escapes a quote as \"
! 16: @json_quote[s]
! 17: $result[^if(^s.pos[\"]>=0){escaped}{RAW QUOTE}]
E-mail: