Characters that can precede the javascript protocol

Firefox logo 32
Chrome logo 32

Characters that can precede the javascript protocol in html

Created by: renniepak

Created on: Wednesday, April 10, 2024 at 8:51:01 AM

Updated on: Tuesday, December 10, 2024 at 5:58:08 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<a href="$[chr]javascript:test.com/" id="test"></a>
Code used after fuzz:
if(document.getElementById("test").protocol=="javascript:"){log($[i])}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="	javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>

Fuzz results

Firefox logo
Firefox 124.0 Unknown Unknown

Updated

Wed Apr 10 2024
Found 32 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknown

Updated

Mon Apr 29 2024
Found 32 results
Loading...