Characters that can precede the javascript protocol copy

Characters that can precede the javascript protocol in html

Created by: Luật Nguyễn

Created on: 5/18/2024, 8:49:52 PM

Updated on: 6/14/2024, 4:08:43 AM

Vector type: XSS

Template used:
<a href="javas$[chr]cript:test.com/" id="test"></a>
Code used after fuzz:
if(document.getElementById("test").protocol=="javascript:"){log($[i])}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Fuzz results

Chrome logo
Chrome 125.0.0.0 Unknown Unknown
Found 3 results
DecHexChr
909HT
DecHexChr
100aLF
DecHexChr
130dCR