Annotation of parser3/tests/462.html, revision 1.2
1.1 moko 1: # tuned js and json tainting
2: @main[]
3: js:
4: 1. quotes: ^apply-taint[js][^taint['single' "double"]]
5: 2. script end and comment: ^apply-taint[js][^taint[</script><!--x-->]]
6: 3. an entity, decoded in an attribute: ^apply-taint[js][^taint['^;]]
7: 4. backslash, line feed, carriage return: ^apply-taint[js][^taint[a\b^#0Ac^#0Dd]]
8: 5. line and paragraph separators: ^apply-taint[js][^taint[a^#E2^#80^#A8b^#E2^#80^#A9c]]
9: 6. cyrillic is kept: ^apply-taint[js][^taint[ัะตัั]]
10: 7. a broken utf-8 sequence does not hide a quote: ^raw_quote[^apply-taint[js][^taint[^#E2^#80"]]]
11:
12: @raw_quote[s]
13: $result[^if(^s.pos["]>=0){RAW QUOTE}{escaped}]
E-mail: