It's possible to bypass content filtering by using UTF-7 encoding.
vulners.com/securityvulns/securityvulns:doc:9504