I love stories like these that leverage practical tricks such as percent-encoding the URL to bypass the filter URL filter.

I love technical writeups about masterfully overwriting structures on the heap, etc. as much as anyone else, but I find more “simple” hacks/workarounds equally exciting.