> Browsers support identifiers that unescape to a reserved word, so long as at least one character is escaped using a Unicode escape sequence. i smell new xss

> Browsers support identifiers that unescape to a reserved word, so long as at least one character is escaped using a Unicode escape sequence. i smell new xss exploits....