Script that would give URLs that might cause an XSS attack based on whether the characters are encoded or not.