Tests which characters escaped cause an external request in-between forward slashes within a CSS URL scheme for background images.
<div style="background:url('/\$[chr]/fuzz.shazzer.co.uk/$[rand]?$[i]')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/v8su7ydpak?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/nvgv6u2b54j?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/z9qrqawq2u?12')"><div style="background:url('/\
/fuzz.shazzer.co.uk/vei87awdeg?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/pfyzeyl3hbo?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/hfxk31uggh7?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/6ekwtqbgfn2?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/a4z1b7zwc65?68')"><div style="background:url('/\a/fuzz.shazzer.co.uk/g6to5cd0t3s?97')"><div style="background:url('/\d/fuzz.shazzer.co.uk/xrf4kmhror?100')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/9ncyauyia0b?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/r2ol7ng9gi?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/8exnrb22v8t?12')"><div style="background:url('/\
/fuzz.shazzer.co.uk/1le931tivx7?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/830kzssspmu?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/ltj7rooyta?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/0t4banvqs0ne?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/5vlxuwsrpp5?68')"><div style="background:url('/\\/fuzz.shazzer.co.uk/b5apgr66jwo?92')"><div style="background:url('/\a/fuzz.shazzer.co.uk/s2trha5x8f?97')">