characters after slash that make a http protocol
⚠ Browser differences
I want to know which character after a slash is considered a slash and creates a protocol
Created by: InsertScript
Created on: Wednesday, April 3, 2024 at 8:59:48 PM
Updated on: Monday, May 19, 2025 at 2:43:15 PM
Detecting browser...
Category: URL Handling
Vector visibility: Public
Vector type: XSS
Vector charset: UTF-8
Template used:
<a href="/$[chr]test.com/" id="test$[i]"></a>Code used after fuzz:
if(document.getElementById("test$[i]").host=="test.com"){log($[i])}Sample payloads
<a href="/0x00test.com/" id="test0"></a><a href="//test.com/" id="test47"></a><a href="/\test.com/" id="test92"></a>Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 1 result
Loading...
Chrome 123.0.0.0 Unknown Unknownolder version
Updated
Wed Apr 03 2024
Found 2 results
Loading...
Firefox 124.0 Unknown Unknown
Updated
Sun Apr 14 2024
Found 2 results
Loading...
Safari 17.4 Unknown Unknown
Updated
Sun Apr 14 2024
Found 2 results
Loading...