sanatize uppercase hexidecimal

fixes markedjs#925

Author: UziTech

lib/marked.js

@@ -1096,8 +1096,8 @@ function escape(html, encode) {
 }
 
 function unescape(html) {
-	// explicitly match decimal, hex, and named HTML entities 
-  return html.replace(/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(?:\w+));?/g, function(_, n) {
+	// explicitly match decimal, hex, and named HTML entities
+  return html.replace(/&(#(?:\d+)|(?:#x[0-9A-Fa-f]+)|(?:\w+));?/ig, function(_, n) {
     n = n.toLowerCase();
     if (n === 'colon') return ':';
     if (n.charAt(0) === '#') {

test/tests/uppercase_hex.sanitize.html

@@ -0,0 +1,2 @@
+<p>lowerlower
+upperupper</p>

test/tests/uppercase_hex.sanitize.text

@@ -0,0 +1,2 @@
+lower[click me](javascript:...)lower
+upper[click me](javascript:...)upper