HTML entities seem to break the parser. And FF warns of XSS if I want to share my XSS sample text:

http://regviz.org/?state=%7B%22regex%22%3A%22XSS%22%2C%22mod...