avm1: Unescape + to space

core/src/avm1/globals.rs

@@ -448,6 +448,9 @@ pub fn unescape<'gc>(
                 remain = 0;
                 hex_chars.clear();
             }
+            b'+' => {
+                out_bytes.push(b' ');
+            }
             _ => {
                 out_bytes.push(c);
             }

tests/tests/swfs/avm1/unescape/output.txt

@@ -6,6 +6,10 @@ unescape("%40%2a%5f%2b%2d%2e%2f")
 @*_+-./
 unescape("%20")
  
+unescape("Hello+World")
+Hello World
+unescape("One%20+mo%2+re")
+One  moe
 unescape("%C4%80%E3%81%82")
 Āあ
 unescape("Āあ")