XSS bypass, WAF, filters, sanitizers. HTML URL UTF-8 encode. https://t.co/lqAEhbY64c