Characters allowed javascript and colon


Vector to check if any characters are allowed between javascript and : to still result in a javascript url.
Created by: renniepak
Created on: Tuesday, April 9, 2024 at 5:52:50 PM
Updated on: Friday, February 21, 2025 at 5:25:16 PM
Vector type: JS
Vector charset: UTF-8
Template used:
if (new URL("javascript$[chr]:alert()").protocol=="javascript:"){log($[i])}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
if (new URL("javascript :alert()").protocol=="javascript:"){alert(9)}
if (new URL("javascript::alert()").protocol=="javascript:"){alert(58)}
if (new URL("javascript\:alert()").protocol=="javascript:"){alert(92)}
Fuzz results

Chrome 123.0.0.0 Unknown Unknown
Updated
Tue Apr 09 2024
Found 3 results
Loading...

Safari 17.2.1 Unknown Unknown
Updated
Tue Apr 09 2024
Found 3 results
Loading...