Shazzer logo

    Characters allowed javascript and colon

    Chrome logo 3
    Safari logo 3

    Vector to check if any characters are allowed between javascript and : to still result in a javascript url.

    Created by: renniepak

    Created on: Tuesday, April 9, 2024 at 5:52:50 PM

    Updated on: Saturday, December 21, 2024 at 11:50:26 AM

    Vector type: JS

    Vector charset: UTF-8

    Template used:
    if (new URL("javascript$[chr]:alert()").protocol=="javascript:"){log($[i])}
    Your browser was detected as:
    Detecting... Detecting... Detecting... Detecting...

    Sample payloads

    if (new URL("javascript	:alert()").protocol=="javascript:"){alert(9)}
    if (new URL("javascript::alert()").protocol=="javascript:"){alert(58)}
    if (new URL("javascript\:alert()").protocol=="javascript:"){alert(92)}

    Fuzz results

    Chrome logo
    Chrome 123.0.0.0 Unknown Unknown

    Updated

    Tue Apr 09 2024
    Found 3 results
    Loading...
    Safari logo
    Safari 17.2.1 Unknown Unknown

    Updated

    Tue Apr 09 2024
    Found 3 results
    Loading...