nikic / PHP-Parser / 37275967941

93%

push

github

Reject malformed Unicode escape sequences (#1176)

`String_` only matches complete hexadecimal Unicode escapes, leaving
malformed sequences as literal text instead of reporting an error:

```php
String_::parse('"\u{zz}"'); // Before: literal \u{zz}
String_::parse('"\u{}"');   // Before: literal \u{}
// After: both throw PhpParser\Error("Invalid UTF-8 codepoint escape sequence")
```

Also match the `\u{` prefix and reject it when no complete hexadecimal
escape was captured. This catches invalid digits, empty escapes, and
missing closing braces.

3 of 3 new or added lines in 1 file covered. (100.0%)

7788 of 8382 relevant lines covered (92.91%)

234.61 hits per line