Testing characters that still close a HTML comment
<!----!$[chr]><found>
<!----!>><img/src/onerror=alert(1)>