Characters allowed between slashes
1This vector shows what characters are allowed inside slashes on an anchor href
Created by: hackvertor
Created on: Monday, April 8, 2024 at 9:29:46 PM
Updated on: Monday, May 26, 2025 at 6:26:27 AM
Category: URL Handling
Vector visibility: Public
Vector type: JS
Vector charset: UTF-8
Code used before fuzz:
const anchor = document.createElement('a');Template used:
anchor.href='/$[chr]/example.com';0x0D
if(anchor.host === 'example.com')log($[i])Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
anchor.href='/0x09/example.com';0x0D
if(anchor.host === 'example.com')alert(9)anchor.href='///example.com';0x0D
if(anchor.host === 'example.com')alert(47)anchor.href='/\/example.com';0x0D
if(anchor.host === 'example.com')alert(92)anchor.href='/0x00/example.com';0x0D
if(anchor.host === 'example.com')alert(0)Fuzz results
Chrome 143.0.0.0 desktop macOS 10.15.7
Updated
Sun Jan 25 2026
Found 1 result
Loading...
Chrome 123.0.0.0 Unknown Unknownolder version
Updated
Mon Apr 08 2024
Found 3 results
Loading...