Characters allowed between hostname and / but don't change the hostname | AkshayJainG | 4/26/2024 |
Characters that can precede the javascript protocol | Abdul Haq | 4/25/2024 |
Characters allowed before onerror events | renniepak | 4/20/2024 |
HTML elements that are self closing or different text content | Gareth Heyes | 4/19/2024 |
HTML elements that parse differently when rendered | Gareth Heyes | 4/19/2024 |
XSS vectors that execute automatically inside math | Gareth Heyes | 4/17/2024 |
XSS vectors that execute automatically inside svg | Gareth Heyes | 4/17/2024 |
XSS vectors that execute automatically | Gareth Heyes | 4/17/2024 |
DOM element relationships | Ahmed Alsanosi | 4/17/2024 |
Characters allowed between hostname and / but don't change the hostname | Thomas Orlita | 4/15/2024 |
Characters allowed after hostname but don't change the hostname | Thomas Orlita | 4/15/2024 |
Characters element name and > | Thomas Orlita | 4/15/2024 |
Characters between < and element name | Thomas Orlita | 4/15/2024 |
Characters allowed before javascript URL | Thomas Orlita | 4/15/2024 |
Characters that change length on .toUpperCase() | Thomas Orlita | 4/15/2024 |
Characters allowed between an object and bracket notation | Rachid.A | 4/15/2024 |
Characters allowed between an object and the dot operator | Rachid.A | 4/15/2024 |
HTML comment before greater than | ShadyEshak | 4/15/2024 |
Characters that can be inserted in the middle of the JS protocol name | Rachid.A | 4/15/2024 |
Characters allowed in-between operators | Gareth Heyes | 4/14/2024 |