Source protection doesn't work properly in some cases

[Wiktor Walc]

The default protection of <SCRIPT> tags and comments doesn't seem to work properly in certain cases, when <SCRIPT> tag is followed by a comment.

Steps to reproduce

1. Paste the following source code:

<p>
<SCRIPT LANGUAGE="JavaScript">
//'
</SCRIPT><!-- comment --><SCRIPT LANGUAGE="JavaScript">
//'
</SCRIPT></p>

2. Switch to wysiwyg mode and back
3. Result: code is changed into:

   <p>
   <SCRIPT LANGUAGE="JavaScript">
   //'
   </SCRIPT>{C}{C}{C}<!-- comment --><SCRIPT LANGUAGE="JavaScript">
   //'
   </SCRIPT></p>
   

(an extra {C} is added everytime when swiching to source and back). Also an extra text {cke_protected_1} is displayed in wysiwyg mode.

Note: it is a reduced example made from a more complicated sample taken from a live website.

[Jakub Ś]

This issue has been reproducible from rev [6457].

NOTE: [6457] is from CKE 3.5.2 but if you check release versions you will be able to reproduce this issue from CKE 3.5.3. Maybe this rev was simply not included in 3.5.2. Anyway I have set 3.5.2 version.

[Jakub Ś]

Another example from #8402 which was marked as duplicate.

<a href="http://en.wikipedia.org/wiki/Fairy_tale/<!--#echo var='DOCUMENT_NAME' -->" title="Fairy tale">fairy tale</a>

[Jakub Ś]

#7805 - different issue but also concerns {C} being inserted.

[Jakub Ś]

Other related to problems with HTML comments: #8732, #8569, #8640, #8129, #6709, #8812, #8402.

[Jakub Ś]

Patch from #9205 fixes this problem.

[Jakub Ś]

#9347 was marked as duplicate.

[Piotrek Koszuliński]

Adding myself to CC.

[Piotrek Koszuliński]

Fixed by #9205.

[Piotrek Koszuliński]

I reopened #8402 which has not been fixed by #9205, so it wasn't an exact duplicate of this issue.