Characters that can be inserted in the middle of the JS protocol name

3

3

3

/

Created on: Monday, April 15, 2024 at 1:45:27 AM

Updated on: Tuesday, December 3, 2024 at 12:30:11 PM

Vector type: XSS

Vector charset: UTF-8

<a id="0" href="j$[chr]avas$[chr]crip$[chr]t:window">craft-me</a>

if (document.getElementById("0").protocol === "javascript:") { log($[i]) }