- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help
- Home
- Vectors
- Stats
- Network
- Tools
- Blog
  - Blog home
  - RSS
- Help

Decoding...

Shazzer

Shared online fuzzer

Fuzzing browsers since 2012

Made by Gareth Heyes

New Users

Popular Users

Updated

mamad
Characters that are valid JS part variables
Characters that are treated as spaces
Characters ignored after colon in URL constructor
Characters ignored after hostname in URL constructor
Characters ignored in hostname before port in URL constructor
URL slash alternatives
URL question mark alternatives
URL hash alternatives
Characters that act as slashes in anchors
Characters that act as hash in anchors
Characters that act as question mark in anchors
Characters that represent "e" in URL constructor host
Characters before @ in a URL constructor host
Characters ignored after param value in URL constructor
Characters ignored before param name in URL constructor
Characters ignored in pathname using a URL constructor
CSS :has() selector
startsWith vs regex
for loop vs forEach

New collections

Characters ignored in URL constructors
Entities in protocol relative URLs

New Vectors

JavaScript URLs allowed by the Sanitizer
Supported HTML and events by the Sanitizer
Supported HTML and attributes by the Sanitizer
String concat vs array join
CSS container queries
CSS :is() selector
indexOf vs includes
startsWith performance
startsWith vs regex
CSS :has() selector

Most Popular

URL domain dot alternatives(8k)
Characters allowed javascript and colon(7.4k)
JavaScript Scheme starting with https://(7k)
Characters allowed between hostname and / but don't change the hostname(6.1k)
Characters between < and element name(6k)
HTML entities that create ASCII characters inside a JavaScript URL(5.9k)
DOM element relationships(5.8k)
Characters that can precede the javascript protocol(5.8k)
characters allowed between exclamation mark and greater then (5.2k)
Characters allowed javascript and colon copy2(5.2k)

Most Liked

URL domain dot alternatives(5)
Characters that can precede the javascript protocol(4)
Characters allowed between multiple HTML attributes(4)
JavaScript Scheme starting with https://(4)
Characters allowed javascript and colon(4)
Characters allowed between hostname and / but don't change the hostname(4)
HTML entities that create ASCII characters inside a JavaScript URL(4)
Entities that cause an external URL before @(4)
Characters appended at the end of TLD within URL, which yield in the same Origin(3)
Characters that cause an external URL before @(3)

disconnected

Distributed Fuzzing

Enabled:

Status:disconnected

Your browser automatically contributes to distributed fuzzing when idle.

Browser stats

Performance Features Differences

Features supported

Chrome supports the most — 3 of 3

Browser-exclusive features

Supported by exactly one browser

No exclusive features — every tested feature is supported by more than one browser (or none).

CSS container queries

CSS Parsing

Detects support for CSS container queries via the container-type property.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓

CSS :is() selector

CSS Parsing

Detects support for the CSS :is() matches-any pseudo-class.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓

CSS :has() selector

CSS Parsing

Detects support for the CSS :has() relational pseudo-class.

Chrome✓

Firefox✓

Safari✓

Microsoft Edge✓