diff options
Diffstat (limited to 'test/regress/regress1/strings/bug615.smt2')
-rw-r--r-- | test/regress/regress1/strings/bug615.smt2 | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/test/regress/regress1/strings/bug615.smt2 b/test/regress/regress1/strings/bug615.smt2 new file mode 100644 index 000000000..86cc592fb --- /dev/null +++ b/test/regress/regress1/strings/bug615.smt2 @@ -0,0 +1,26 @@ +(set-logic QF_S) +(set-option :strings-exp true) +(set-info :status sat) + +(declare-fun s () String) +;(assert (= s "</script><script>alert(1);</script><script>")) + +(declare-fun joined () String) +(assert (= joined (str.++ "<script>console.log('" s "');</script>"))) +(assert (str.contains joined "<script>alert(1);</script>")) + +; (<script>[^<]*</script>)+ +(assert (str.in.re joined + (re.+ (re.++ + (str.to.re "<script>") + (re.* + (re.union + (re.range " " ";") + (re.range "=" "~") + ) + ) + (str.to.re "</script>") + )) + )) + +(check-sat) |