regular expressions. Finally, until early 2006, the PHP
interpreter had a vulnerability in which it did not quote error
messages, but many researchers only reported the surface-level
‘resultant’ XSS instead of figuring out whether there was a