escape dangerous strings inside javascript, including env =

1 files changed, 2 insertions, 0 deletions

diff --git a/test/it_html.t b/test/it_html.t
index ae11ad1..e6477da 100755
--- a/test/it_html.t
+++ b/test/it_html.t
@@ -288,3 +288,5 @@ is(it_html::entity_decode("’"), "'", "it_html::entity_decode numeric decim
 is(it_html::entity_decode("࿿"), " ", "it_html::entity_decode invalid numeric hex entity");
 is(it_html::entity_decode("ϧ"),  " ", "it_html::entity_decode invalid numeric decimal entity");
 is(it_html::entity_decode("‹"),   " ", "it_html::entity_decode entity von 0x80-0x9f");
+
+is(js('<SCriPT> </script> </SCriPT> <!--'), "<script type=\"text/javascript\">\\x3Cscript> \\x3C/script> \\x3C/script> \\x3C!--</script>\n", "escape dangerous js content");