3
3
3
3Vector to check if any characters are allowed between javascript and : to still result in a javascript url.
if (new URL("javascript$[chr]:alert()").protocol=="javascript:"){log($[i])}if (new URL("javascript0x09:alert()").protocol=="javascript:"){alert(9)}if (new URL("javascript::alert()").protocol=="javascript:"){alert(58)}if (new URL("javascript\:alert()").protocol=="javascript:"){alert(92)}