fails:StringScanner#matched taints the returned String if the input was tainted
