Javascript XSS filter bypass using HTML imports and utf-16be encoding

https://gist.github.com/itsZN/c26a6a097b1186bc7629555d58255abf

Original writeup (https://gist.github.com/itsZN/c26a6a097b1186bc7629555d58255abf).