FA-3256 / Markup / Open access

Comment content leaks into extracted XML text · case 01

Comment content leaks into extracted XML text.

Verified by executionVariant 1 · 4 checks per implementationDownload source bundle ↓JSON ↗

ROOT CAUSE

The implementation applies an operation whose text or grammar semantics violate this contract: Extract element text in document order while ignoring XML comments.

VERIFIED REPAIR

Implement the complete stated contract, including the boundary fixtures: Extract element text in document order while ignoring XML comments.

Unsuccessful approach: The attempted repair handles the primary example but still violates a separate boundary of the same contract.

Case contract

Extract element text in document order while ignoring XML comments.

Why this case matters

A local executable model for consumers of structured text; oracle values are authored literals, not outputs copied from the repaired implementation.

1 / The failure

Exit 1

"""Failure Map reference implementation. Python standard library only."""
import json
import re, unicodedata, json, csv, io, html, base64, binascii, codecs, struct
from urllib.parse import quote, unquote, unquote_to_bytes, urlencode, parse_qsl, urlsplit, urlunsplit
from email.header import decode_header, make_header
from email.utils import getaddresses
from xml.etree import ElementTree as ET
import shlex, string, textwrap

N = 1
observations = []
def solve(x):
    try:
        return re.sub('<[^>]+>','',x)
    except Exception as exc:
        return {"error": type(exc).__name__}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('boundary 1', solve('<r>a<!--hidden-->b</r>'), 'ab')
check('boundary 2', solve('<r>&lt;x&gt;</r>'), '<x>')
check('boundary 3', solve('<r><b>v</b>!</r>'), 'v!')
check('boundary 4', solve('<r/>'), '')
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
boundary 1	`ab`	`ab`	Passed
boundary 2	`<x>`	`<x>`	Failed
boundary 3	`v!`	`v!`	Passed
boundary 4			Passed

SHA-256 / 940b0dbd74fcf539cf3d8f252461f1ddc3c0001a180a998b13cd70459bf5490f

2 / The unsuccessful fix

Exit 1

"""Failure Map reference implementation. Python standard library only."""
import json
import re, unicodedata, json, csv, io, html, base64, binascii, codecs, struct
from urllib.parse import quote, unquote, unquote_to_bytes, urlencode, parse_qsl, urlsplit, urlunsplit
from email.header import decode_header, make_header
from email.utils import getaddresses
from xml.etree import ElementTree as ET
import shlex, string, textwrap

N = 1
observations = []
def solve(x):
    try:
        return ''.join(ET.fromstring(x,parser=ET.XMLParser(target=ET.TreeBuilder(insert_comments=True))).itertext())
    except Exception as exc:
        return {"error": type(exc).__name__}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('boundary 1', solve('<r>a<!--hidden-->b</r>'), 'ab')
check('boundary 2', solve('<r>&lt;x&gt;</r>'), '<x>')
check('boundary 3', solve('<r><b>v</b>!</r>'), 'v!')
check('boundary 4', solve('<r/>'), '')
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
boundary 1	`ahiddenb`	`ab`	Failed
boundary 2	`<x>`	`<x>`	Passed
boundary 3	`v!`	`v!`	Passed
boundary 4			Passed

SHA-256 / 7318b192cbebbee47ac2626b2144b2f422dcfd0ed6133e71b9593cdf4ef3f491

3 / The verified repair

Exit 0

"""Failure Map reference implementation. Python standard library only."""
import json
import re, unicodedata, json, csv, io, html, base64, binascii, codecs, struct
from urllib.parse import quote, unquote, unquote_to_bytes, urlencode, parse_qsl, urlsplit, urlunsplit
from email.header import decode_header, make_header
from email.utils import getaddresses
from xml.etree import ElementTree as ET
import shlex, string, textwrap

N = 1
observations = []
def solve(x):
    try:
        return ''.join(ET.fromstring(x).itertext())
    except Exception as exc:
        return {"error": type(exc).__name__}
def check(label, actual, expected):
    observations.append({"check": label, "actual": actual, "expected": expected, "passed": actual == expected})
check('boundary 1', solve('<r>a<!--hidden-->b</r>'), 'ab')
check('boundary 2', solve('<r>&lt;x&gt;</r>'), '<x>')
check('boundary 3', solve('<r><b>v</b>!</r>'), 'v!')
check('boundary 4', solve('<r/>'), '')
print(json.dumps({"observations": observations, "passed": all(x["passed"] for x in observations)}, ensure_ascii=False))
raise SystemExit(0 if all(x["passed"] for x in observations) else 1)

Boundary fixture	Actual	Expected	Outcome
boundary 1	`ab`	`ab`	Passed
boundary 2	`<x>`	`<x>`	Passed
boundary 3	`v!`	`v!`	Passed
boundary 4			Passed

SHA-256 / 945e155463190c064b6bb902ccaf1c00a75082482cadb370c00225ddd46bbc0d

Verification & scope

This reproducer isolates one failure mechanism. Results cover the supplied fixtures. Variants within a family share a test contract and should remain grouped when constructing evaluation splits. Related mechanisms with a shared evaluation_group must also remain together; these controlled models are not independent production incidents.

Observations recorded using Python 3.12.14 at 2026-09-29T14:37:23.455985+00:00.

Case digest / 4510ae15187eb0a98a02205ed8febdeef26cddd1b338825d907e5ee38aa33599