2023-11-20

-------------
PROBLEM
-------------
When hc(hop count)=17, and the input css is bootstarp.3.1.1.min.css,
then CSS Obfuscator produces a JavaScript that messes up css.

==> This bug is called "hc17-bug" and you can find test script in 
"research/hc17-bug"

-------------
CAUSE
-------------
The script echos a output string in <textarea> without using htmlspecialchars.

It is rare but once in a blue moon, the produced output string contains
string like "&gt"
If it is echoed inside <textarea>, then "&gt" will be converted to ">" inadvertently.

-------------
SOLUTION
-------------
Use htmlspecialchars to echo strings in <textarea>.