Fix for ASSERT and more with bad CSS input.

LayoutTests/fast/css/css-escaped-identifier.html

Index: LayoutTests/fast/css/css-escaped-identifier.html
diff --git a/LayoutTests/fast/css/css-escaped-identifier.html b/LayoutTests/fast/css/css-escaped-identifier.html
index 87bf7548d1f18193624116584f9aaf5c64523641..c2e1190945e08188ca7aab73cc274f72b61f3a33 100644
--- a/LayoutTests/fast/css/css-escaped-identifier.html
+++ b/LayoutTests/fast/css/css-escaped-identifier.html
@@ -4,6 +4,8 @@
     <style>
         d\eeeex {}
         D\eeeeX {}
+        x { background-image: url('http://w/\aaaa/1b\aaaa.gif'); }
+        y { background-image: url(http://w/\aaaa/1b\aaaa.gif); }
     </style>
 
     <script src="../../resources/testharness.js"></script>
@@ -16,9 +18,11 @@
             var stylesheet = styleElm.sheet;
             assert_not_equals(stylesheet, undefined, "style.sheet exists");
             rules = stylesheet.cssRules;
-            assert_equals(rules.length, 2, "cssRules.length == 2");
+            assert_equals(rules.length, 4, "cssRules.length == 4");
             assert_equals(rules[0].selectorText, "d\ueeeex", "Lowercase identifier with escapes");
             assert_equals(rules[1].selectorText, "d\ueeeex", "Uppercase identifier with escapes");
+            assert_equals(rules[2].style.cssText, "background-image: url(http://w/%EA%AA%AA/1b%EA%AA%AA.gif);", "Escaped url string");
+            assert_equals(rules[3].style.cssText, "background-image: url(http://w/%EA%AA%AA/1b%EA%AA%AA.gif);", "Escaped url without string");
         }, "Correctly parsed identifier with escapes");
     </script>
 </head>