fails:StringScanner#post_match taints the returned String if the input was tainted
