{"abstract":"Attribute escaping leaves quote delimiters active.","category":"Markup","checks":4,"contract":"Escape ampersand, angle brackets and both quote characters for HTML attribute text.","contract_signature":"x","evaluation_group":"model-1ac7534c7ff629b3","failed_approach":"The attempted repair handles the primary example but still violates a separate boundary of the same contract.","family":"xp-html-escape-attribute","id":"FA-3211","implementations":{"attempt":{"sha256":"916ee176e018f92e5273d59ed8fcc84a5a41dfa97f8ec731978821dd23402468","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport re, unicodedata, json, csv, io, html, base64, binascii, codecs, struct\nfrom urllib.parse import quote, unquote, unquote_to_bytes, urlencode, parse_qsl, urlsplit, urlunsplit\nfrom email.header import decode_header, make_header\nfrom email.utils import getaddresses\nfrom xml.etree import ElementTree as ET\nimport shlex, string, textwrap\n\nN = 1\nobservations = []\ndef solve(x):\n try:\n return html.escape(x,quote=False)\n except Exception as exc:\n return {\"error\": type(exc).__name__}\ndef check(label, actual, expected):\n observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('boundary 1', solve('\"a\"'), '"a"')\ncheck('boundary 2', solve(\"'\"), ''')\ncheck('boundary 3', solve('<'), '&lt;')\ncheck('boundary 4', solve('<>'), '<>')\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"},"broken":{"sha256":"c33da5952b19237fe34e7b750b9bc382b16cc3eb3762abf7bb6288a309adf52b","source":"\"\"\"Failure Map reference implementation. Python standard library only.\"\"\"\nimport json\nimport re, unicodedata, json, csv, io, html, base64, binascii, codecs, struct\nfrom urllib.parse import quote, unquote, unquote_to_bytes, urlencode, parse_qsl, urlsplit, urlunsplit\nfrom email.header import decode_header, make_header\nfrom email.utils import getaddresses\nfrom xml.etree import ElementTree as ET\nimport shlex, string, textwrap\n\nN = 1\nobservations = []\ndef solve(x):\n try:\n return x.replace('<','<').replace('>','>')\n except Exception as exc:\n return {\"error\": type(exc).__name__}\ndef check(label, actual, expected):\n observations.append({\"check\": label, \"actual\": actual, \"expected\": expected, \"passed\": actual == expected})\ncheck('boundary 1', solve('\"a\"'), '"a"')\ncheck('boundary 2', solve(\"'\"), ''')\ncheck('boundary 3', solve('<'), '&lt;')\ncheck('boundary 4', solve('<>'), '<>')\nprint(json.dumps({\"observations\": observations, \"passed\": all(x[\"passed\"] for x in observations)}, ensure_ascii=False))\nraise SystemExit(0 if all(x[\"passed\"] for x in observations) else 1)\n"}},"limitations":" This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.","method":"Deterministic executable model with adversarial boundary fixtures.","provenance":{"created_by":"Failure Map","dependencies":"Python standard library","family":"xp-html-escape-attribute","generated_at":"2026-09-29T14:37:22.572852+00:00","license":"CC0-1.0","python":"3.12.14","seed":1,"split":"open-access"},"relevance":"A local executable model for consumers of structured text; oracle values are authored literals, not outputs copied from the repaired implementation.","root_cause":"The implementation applies an operation whose text or grammar semantics violate this contract: Escape ampersand, angle brackets and both quote characters for HTML attribute text.","sha256":"eb21b79af00584f438575e1081e7e0ce4980ec575e032c83ab04a9b8e6386c3a","title":"Attribute escaping leaves quote delimiters active ยท case 01","variant":1,"variant_policy":"Five numbered records share a model and may reuse boundary fixtures.","verified":true,"visibility":"public","verification":{"attempt":{"elapsed_ms":51.785,"exit_code":1,"observations":[{"actual":"\"a\"","check":"boundary 1","expected":""a"","passed":false},{"actual":"'","check":"boundary 2","expected":"'","passed":false},{"actual":"&lt;","check":"boundary 3","expected":"&lt;","passed":true},{"actual":"<>","check":"boundary 4","expected":"<>","passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"boundary 1\", \"actual\": \"\\\"a\\\"\", \"expected\": \""a"\", \"passed\": false}, {\"check\": \"boundary 2\", \"actual\": \"'\", \"expected\": \"'\", \"passed\": false}, {\"check\": \"boundary 3\", \"actual\": \"&lt;\", \"expected\": \"&lt;\", \"passed\": true}, {\"check\": \"boundary 4\", \"actual\": \"<>\", \"expected\": \"<>\", \"passed\": true}], \"passed\": false}\n"},"broken":{"elapsed_ms":54.943,"exit_code":1,"observations":[{"actual":"\"a\"","check":"boundary 1","expected":""a"","passed":false},{"actual":"'","check":"boundary 2","expected":"'","passed":false},{"actual":"<","check":"boundary 3","expected":"&lt;","passed":false},{"actual":"<>","check":"boundary 4","expected":"<>","passed":true}],"passed":false,"stderr":"","stdout":"{\"observations\": [{\"check\": \"boundary 1\", \"actual\": \"\\\"a\\\"\", \"expected\": \""a"\", \"passed\": false}, {\"check\": \"boundary 2\", \"actual\": \"'\", \"expected\": \"'\", \"passed\": false}, {\"check\": \"boundary 3\", \"actual\": \"<\", \"expected\": \"&lt;\", \"passed\": false}, {\"check\": \"boundary 4\", \"actual\": \"<>\", \"expected\": \"<>\", \"passed\": true}], \"passed\": false}\n"}},"member_only":{"stages":["fixed"],"fields":["implementations.fixed","verification.fixed","harness","repair"],"note":"The verified repair, its recorded checks, the repair description, and the scoring harness are available to members."}}