@@ -493,7 +493,6 @@ public static function data_unallowed_modifiable_text_updates() {
493493 'Non-JS SCRIPT with </script> ' => array ( '<script type="text/html">Replace me</script> ' , 'Just a </script> ' ),
494494 'Non-JS SCRIPT with <script attributes> ' => array ( '<script language="text">Replace me</script> ' , '<!-- <script sneaky>after ' ),
495495 'Non-JS SCRIPT with </script attributes> ' => array ( '<script language="text">Replace me</script> ' , 'before</script sneaky>after ' ),
496-
497496 );
498497 }
499498
@@ -530,6 +529,10 @@ public static function data_script_tag_text_updates(): array {
530529 '1</SCRIPT>/ ' => array ( '<script></script> ' , '1</SCRIPT>/ ' , '<script>1</\u0053CRIPT>/</script> ' ),
531530 '"</script>" ' => array ( '<script></script> ' , '"</script>" ' , '<script>"</\u0073cript>"</script> ' ),
532531 '"</ScRiPt>" ' => array ( '<script></script> ' , '"</ScRiPt>" ' , '<script>"</\u0053cRiPt>"</script> ' ),
532+ 'Tricky script open tag with \r ' => array ( '<script></script> ' , "<!-- <script \r> " , "<script><!-- < \\u0073cript \r></script> " ),
533+ 'Tricky script open tag with \r\n ' => array ( '<script></script> ' , "<!-- <script \r\n> " , "<script><!-- < \\u0073cript \r\n></script> " ),
534+ 'Tricky script close tag with \r ' => array ( '<script></script> ' , "// </script \r> " , "<script>// </ \\u0073cript \r></script> " ),
535+ 'Tricky script close tag with \r\n ' => array ( '<script></script> ' , "// </script \r\n> " , "<script>// </ \\u0073cript \r\n></script> " ),
533536 'Module tag ' => array ( '<script type="module"></script> ' , '"<script>" ' , '<script type="module">"<\u0073cript>"</script> ' ),
534537 'Tag with type ' => array ( '<script type="text/javascript"></script> ' , '"<script>" ' , '<script type="text/javascript">"<\u0073cript>"</script> ' ),
535538 'Tag with language ' => array ( '<script language="javascript"></script> ' , '"<script>" ' , '<script language="javascript">"<\u0073cript>"</script> ' ),
0 commit comments