This `<script>a="</script>"</scrIPT>` breaks parser in two different ways. due to the stupid optimization in the `ff` (fast-forward) function.