The current implementation changes "></A></ADDRESS>"><script>alert(document.domain)</script><ADDRESS><A "/xss/" to ></A></ADDRESS>"><script>alert(document.domain)</script><ADDRESS><A "/xss/". It should instead change it to AADDRESSscriptalertdocument.domainscriptADDRESSAxss.
The current implementation changes
"></A></ADDRESS>"><script>alert(document.domain)</script><ADDRESS><A "/xss/"to></A></ADDRESS>"><script>alert(document.domain)</script><ADDRESS><A "/xss/". It should instead change it toAADDRESSscriptalertdocument.domainscriptADDRESSAxss.[ch38573]