Characters that can precede the javascript protocol copy

Chrome logo 32

Characters that can precede the javascript protocol in html

Created by: rcbarnett

Created on: Thursday, May 2, 2024 at 3:39:17 PM

Updated on: Monday, November 11, 2024 at 9:27:01 AM

Vector type: XSS

Vector charset: UTF-8

Template used:
<a href="$[chr]javascript:test.com/" id="test"></a>
Code used after fuzz:
if(document.getElementById("test").protocol=="javascript:"){log($[i])}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="	javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="
javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>
<a href="javascript:test.com/" id="test"></a>

Fuzz results

Chrome logo
Chrome 124.0.0.0 Unknown Unknown

Updated

Thu May 02 2024
Found 32 results
Loading...