HTML entities inside JavaScript URL

2

2

2

2

Shows which HTML entities are allowed inside the JavaScript protocol

Created on: Tuesday, June 25, 2024 at 11:56:40 AM

Updated on: Wednesday, May 28, 2025 at 5:08:10 PM

Category: Entity Parsing

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

Vector data 1: html_entities

const div = document.createElement('div');

div.innerHTML='<a href="java$[data1]script:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && log('$[data1]')