Shazzer logo

characters after slash that make a http protocol

⚠ Browser differences
Chrome logo 1
Safari logo 2
Firefox logo 2

I want to know which character after a slash is considered a slash and creates a protocol

Created by: InsertScript

Created on: Wednesday, April 3, 2024 at 8:59:48 PM

Updated on: Monday, May 19, 2025 at 2:43:15 PM


Detecting browser...

Category: URL Handling

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

Template used:
<a href="/$[chr]test.com/" id="test$[i]"></a>
Code used after fuzz:
if(document.getElementById("test$[i]").host=="test.com"){log($[i])}

Sample payloads

<a href="/0x00test.com/" id="test0"></a>
<a href="//test.com/" id="test47"></a>
<a href="/\test.com/" id="test92"></a>

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 1 result
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknownolder version

Updated

Wed Apr 03 2024
Found 2 results
Loading...
Firefox logo
Firefox 124.0 Unknown Unknown

Updated

Sun Apr 14 2024
Found 2 results
Loading...
Safari logo
Safari 17.4 Unknown Unknown

Updated

Sun Apr 14 2024
Found 2 results
Loading...