Tests which characters escaped cause an external request in-between forward slashes within a CSS URL scheme for background images.
<div style="background:url('/\$[chr]/fuzz.shazzer.co.uk/$[rand]?$[i]')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/ozak2alrd5?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/8xoqcush5jv?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/mlt404zp85s?12')"><div style="background:url('/\0x0D/fuzz.shazzer.co.uk/ig7w4oz6tv?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/5xg6t9wg9ov?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/s5xr6e0d19?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/ot7wb3h3ev?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/eew3vjp46zm?68')"><div style="background:url('/\a/fuzz.shazzer.co.uk/bwje0ohw866?97')"><div style="background:url('/\d/fuzz.shazzer.co.uk/svu6ym6qfvl?100')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/yjihyplet6o?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/t0lox1jco4?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/vjnyem6m9h9?12')"><div style="background:url('/\0x0D/fuzz.shazzer.co.uk/g2d3ol9mc2?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/h4m1pcdgpzr?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/wv25w0ji8gg?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/wmrjhc0vpfs?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/9knwgjhnesm?68')"><div style="background:url('/\\/fuzz.shazzer.co.uk/dv6gtr0w104?92')"><div style="background:url('/\a/fuzz.shazzer.co.uk/439dwgnr0zf?97')">