Shazzer logo

Characters that expand upon toUpperCase()

Chrome logo 8

Useful to bypass strict length checks and differentials between toUpperCase() / toLowerCase() .

Created by: DreyAnd

Created on: Wednesday, April 10, 2024 at 10:34:26 PM

Updated on: Friday, May 23, 2025 at 4:25:11 PM


Category: JavaScript Syntax

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

Code used before fuzz:
function isASCII(str) {0x0D
  for (var i = 0; i < str.length; i++) {0x0D
    if (str.charCodeAt(i) > 127) {0x0D
      return false;0x0D
    }0x0D
  }0x0D
  return true;0x0D
}
Template used:
const c = String.fromCodePoint(i)0x0D
const c_upper = c.toUpperCase()0x0D
if (c_upper.length > c.length && isASCII(c_upper)){0x0D
    log(c)0x0D
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

const c = String.fromCodePoint(i)0x0D
const c_upper = c.toUpperCase()0x0D
if (c_upper.length > c.length && isASCII(c_upper)){0x0D
    alert(c)0x0D
}

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Mon Jan 26 2026
Found 8 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknownolder version

Updated

Fri Apr 19 2024
Found 8 results
Loading...