258: use atob/btoa instead of escape/unescape and use inline onload/oninput handlers on body