This vector shows if a character is allowed in an entity. Firefox did that in the past
Unable to render tweet button
<a href="javascript&colo$[chr]n;abcd" id="x">f</a>
try{ if(x.protocol == "javascript:")log($[i]) }catch(e){}
1
1
1