Tests which characters escaped cause an external request in-between forward slashes within a CSS URL scheme for background images.
<div style="background:url('/\$[chr]/fuzz.shazzer.co.uk/$[rand]?$[i]')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/ufg9txk2rhq?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/u3w17gsxyy?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/ml1jdu0u51?12')"><div style="background:url('/\0x0D/fuzz.shazzer.co.uk/fn97jp3wz04?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/wvfsamw3bhg?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/z4uq66okd4g?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/ckrhoaltfd4?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/kq6lk2x0qf?68')"><div style="background:url('/\\/fuzz.shazzer.co.uk/9au7clp6x16?92')"><div style="background:url('/\a/fuzz.shazzer.co.uk/57j9bdl75bs?97')"><div style="background:url('/\d/fuzz.shazzer.co.uk/meiribt9w5f?100')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/frqe8a03uyq?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/ertc9vcbnih?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/p5eil5z2xw?12')"><div style="background:url('/\0x0D/fuzz.shazzer.co.uk/42jkyo3rj8b?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/6k1341w38o4?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/3eivxiddrpq?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/3dtjaz6ll4s?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/br995hchfi?68')"><div style="background:url('/\a/fuzz.shazzer.co.uk/mukd62dwslr?97')">