It means that, during the investigation of an xss attack, an analysis of all uppercase letters from "A" to "Z" will occur, all lowercase letters from "a" to "z", all numbers from 0-9 and the "%" symbol. If the analyzed file has any character that is different from those mentioned above, the analysis will not capture it and it will be ignored, which may indicate that the file contains malicious objectives inside the machine.