$request:charset[utf-8]

$sValue[abcdefghijklmnopqrstuvwxyz ABCDEFGHIJKLMNOPQRSTUVWXYZ
0123456789
`+-=~!@#^$%^^&*()_
[]{}<>^;:'",./?

абвгдеёжзийклмнопрстуфхцчшщъыьэюя	АБВГДЕЁЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯ]

<hr />
Origin:
<pre>
=^taint[html][$sValue]=
</pre>


<hr />
$sEscapeValued[^sValue.js-escape[]]
Escaped:
<pre>
=^taint[html][$sEscapeValued]=
</pre>


<hr />
$sUnescapedValue[^string:js-unescape[$sEscapeValued]]
Unescaped [^if($sUnescapedValue eq $sValue){equal to source}{NOT equal to source}]:
<pre>
=^taint[html][$sUnescapedValue]=
</pre>


<hr />
Empty string escape/unescape:
$v[]
$s[$v]
<pre>
=^s.js-escape[]=
=^string:js-unescape[$s]=
</pre>