Characters that can precede the javascript protocol
32
32Characters that can precede the javascript protocol in html
Created by: renniepak
Created on: Wednesday, April 10, 2024 at 8:51:01 AM
Updated on: Monday, March 24, 2025 at 9:40:38 AM
Vector type: XSS
Vector charset: UTF-8
Template used:
<a href="$[chr]javascript:test.com/" id="test"></a>
Code used after fuzz:
if(document.getElementById("test").protocol=="javascript:"){log($[i])}Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href=" javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href=" javascript:test.com/" id="test"></a>
<a href=" javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
Fuzz results
Firefox 124.0 Unknown Unknown
Updated
Wed Apr 10 2024
Found 32 results
Loading...
Chrome 124.0.0.0 Unknown Unknown
Updated
Mon Apr 29 2024
Found 32 results
Loading...