Javascript XSS filter bypass using HTML imports and utf-16be encoding

[https://gist.github.com/itsZN/c26a6a097b1186bc7629555d58255abf](https://gist.github.com/itsZN/c26a6a097b1186bc7629555d58255abf)

Original writeup (https://gist.github.com/itsZN/c26a6a097b1186bc7629555d58255abf).