Fixed IE 9- related bypass technique with vector "<![<img src=a onerror=alert(/ololo/)//]-->"