Properties that contain URLs

This vector shows all the properties in window and document that contain a URL.

Created byhackvertor

Created May 31, 2024

Updated May 27, 2025

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Code used before fuzz:

const regex = /(?:about|https?):/;0x0D
Object.getOwnPropertyNames(window).forEach(prop => {0x0D
   try{0x0D
      regex.test(window[prop]+'')&&log('window.'+prop)0x0D
   }catch{}0x0D
});0x0D
for(const prop in document){0x0D
  try{0x0D
       regex.test(document[prop]+'')&&log('document.'+prop);0x0D
  } catch{}0x0D
}

Template used:

Properties that contain URLs

Sample payloads

Fuzz results

Properties that contain URLs

Sample payloads

Fuzz results

Distributed Fuzzing