HTML escaped: <script>alert('XSS')</script>
URL escaped: hello%20world
JS escaped: "It\u0027s a \u0022test\u0022"