even if they are not special in the original encoding. Attackers might then be able to
exploit this discrepancy and conduct injection attacks; they even might be able to bypass
protection mechanisms that assume the original encoding is also being used by the
downstream component.