Characters allowed between slashes

This vector shows what characters are allowed inside slashes on an anchor href

Shazzer Master

Created Apr 8, 2024

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeJS

CharsetUTF-8

Code used before fuzz:

const anchor = document.createElement('a');

Template used:

anchor.href='/$[chr]/example.com';
if(anchor.host === 'example.com')log($[i])

Sample payloads

anchor.href='/0x09/example.com';
if(anchor.host === 'example.com')alert(9)

anchor.href='///example.com';
if(anchor.host === 'example.com')alert(47)

anchor.href='/\/example.com';
if(anchor.host === 'example.com')alert(92)