<!DOCTYPE html>
<html>
<head>
  <meta charset=utf-8>
  <title>&lt;param&gt;</title>
</head>
<body>
<p>
  <object data='foo'><param name="foo" value='bar'></object>

  <object data='foo'><param name="foo" value="!@#$%$ ^&amp;)"></object>
  <object data='foo'><param name="foo" value="!@#$%$ ^&amp;)"></object>

  <object data='foo'><param name="foo" value="uri"></object>
  <object data='foo'><param name="foo" value="uri"></object>
</p>
</body>
</html>