During an investigation of an XSS attack, the investigator comes across the term “[a-zA-Z0-9\%]+” in...

Checks for upper and lower-case alphanumeric string inside the tag, or its hex representation

Checks for forward slash used in HTML closing tags, its hex or double-encoded hex equivalent

Checks for opening angle bracket, its hex or double-encoded hex equivalent

Checks for closing angle bracket, hex or double-encoded hex equivalent