mutate instead of breakout
added attribute mutation. &#xYZ; for all \u0.. for those that start with 'on'
change to JS-made base64 so we don't screw up on unicode characters (next commit)
alternatives to whitespaces
oops, missing var statement. leaking variable into global scope
updating todo-file
xss bookmarklet