Tests which characters escaped cause an external request in-between forward slashes within a CSS URL scheme for background images.
<div style="background:url('/\$[chr]/fuzz.shazzer.co.uk/$[rand]?$[i]')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/8sj4tyspa26?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/8n3v44rw20j?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/v8qb0vb9zzl?12')"><div style="background:url('/\
/fuzz.shazzer.co.uk/49mtd9lzzkb?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/jssy6p3ic8d?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/quiclxvyl5a?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/r1hxs27i4b?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/lbpmd8zaxw?68')"><div style="background:url('/\\/fuzz.shazzer.co.uk/p8sqsm9df4?92')"><div style="background:url('/\a/fuzz.shazzer.co.uk/0qibkougwcnq?97')"><div style="background:url('/\d/fuzz.shazzer.co.uk/0mt7a6qprgkh?100')"><div style="background:url('/\0x09/fuzz.shazzer.co.uk/45t604xsp7q?9')"><div style="background:url('/\
/fuzz.shazzer.co.uk/mu68qnw9qj8?10')"><div style="background:url('/\0x0C/fuzz.shazzer.co.uk/ttzkd2bmis?12')"><div style="background:url('/\
/fuzz.shazzer.co.uk/xzynluhj0ci?13')"><div style="background:url('/\//fuzz.shazzer.co.uk/cvalic15n4?47')"><div style="background:url('/\9/fuzz.shazzer.co.uk/06sfux0f97ah?57')"><div style="background:url('/\A/fuzz.shazzer.co.uk/op3g0afbjbc?65')"><div style="background:url('/\D/fuzz.shazzer.co.uk/bzrrxg9vr1b?68')"><div style="background:url('/\a/fuzz.shazzer.co.uk/uttvp2qjd5m?97')">