Reflected XSS via JavaScript URL Injection with Character Filtering

Several characters are being blocked by the application to protect against XSS