Robuta

https://shazzer.co.uk/vectors/667ab0eab2030d4dfd99d007
Shows which HTML entities are allowed after colon with the JavaScript protocol
html entitiesinsidejavascripturlcolon
https://shazzer.co.uk/vectors/6888aa94646829b3f97d292f
This vector shows what Named HTML entities that can be closed with !.
html entitiesnamedclosed
https://xsstrain.com/train-18.php?status=good
reserved charactersconvertshtmlentitiesurl