Escaping of / character, according to OWASP

Escaping of / to &amp;#x2F entity added to the escape method.