Properties that contain URLs

5

5

5

This vector shows all the properties in window and document that contain a URL.

Created on: Friday, May 31, 2024 at 7:55:52 PM

Updated on: Tuesday, May 27, 2025 at 3:36:36 PM

Category: XSS Execution

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

const regex = /(?:about|https?):/;
Object.getOwnPropertyNames(window).forEach(prop => {
   try{
      regex.test(window[prop]+'')&&log('window.'+prop)
   }catch{}
});
for(const prop in document){
  try{
       regex.test(document[prop]+'')&&log('document.'+prop);
  } catch{}
}

1337