Well, you could bypass that by using String.fromCharCode() eventually? i.e. https://igot99inputs.appspot.com/andthisainttwo<img src=x…
Couldn't resist. https://igot99inputs.appspot.com/andthisainttwo%3Cimg%20src=...
Well, you could bypass that by using String.fromCharCode() eventually? i.e. https://igot99inputs.appspot.com/andthisainttwo<img src=x…
Couldn't resist. https://igot99inputs.appspot.com/andthisainttwo%3Cimg%20src=...