Characters allowed between slashes

⚠ Browser differences

This vector shows what characters are allowed inside slashes on an anchor href

Shazzer Elite

Created Apr 8, 2024

Updated May 26, 2025

Unable to render tweet button

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeJS

CharsetUTF-8

Code used before fuzz:

const anchor = document.createElement('a');

Template used:

anchor.href='/$[chr]/example.com';0x0D
if(anchor.host === 'example.com')log($[i])

Sample payloads

anchor.href='/0x09/example.com';0x0D
if(anchor.host === 'example.com')alert(9)

anchor.href='///example.com';0x0D
if(anchor.host === 'example.com')alert(47)

anchor.href='/\/example.com';0x0D
if(anchor.host === 'example.com')alert(92)