"asdf".replace("as", "$&$&$&") gives "$&$&$&df" rather than the expected "asasasdf". "asdf".replace(/as/, "$&$&$&") correctly gives "asasasdf".
<rdar://problem/6274993>
stringProtoFuncReplace needs to call substituteBackreferences on replacementString
Created attachment 26331 [details] patch
http://trac.webkit.org/changeset/39542