From 9abb780da70232b6363035fca502a5af6ca3fd93 Mon Sep 17 00:00:00 2001
From: Sergey <sergey.gorbaty@salesforce.com>
Date: Tue, 28 Feb 2017 09:47:27 -0800
Subject: [PATCH] Additional negative test

---
 .../lang/vf/rule/security/xml/VfUnescapeEl.xml | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfUnescapeEl.xml b/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfUnescapeEl.xml
index 6aac4cbabf..32c0698e30 100644
--- a/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfUnescapeEl.xml
+++ b/pmd-visualforce/src/test/resources/net/sourceforge/pmd/lang/vf/rule/security/xml/VfUnescapeEl.xml
@@ -240,6 +240,24 @@ XSS via item value
     </apex:form>
 </apex:page>
     
+]]></code>
+		<source-type>vf</source-type>
+	</test-code>
+
+	<test-code>
+		<description><![CDATA[
+XSS via item value
+     ]]></description>
+		<expected-problems>0</expected-problems>
+		<code><![CDATA[
+<apex:page>
+    <apex:form>
+        <apex:selectList value="{!string}" size="1">
+            <apex:selectOption itemValue='{!HTMLENCODE(XSS)}' itemLabel="Red" itemEscaped="false"/>
+        </apex:selectList> 
+    </apex:form>
+</apex:page>
+    
 ]]></code>
 		<source-type>vf</source-type>
 	</test-code>