HTML entities inside JavaScript URL before colon

Shows which HTML entities are allowed after colon with the JavaScript protocol

Created by: hackvertor

Created on: Tuesday, June 25, 2024 at 11:58:34 AM

Updated on: Wednesday, May 28, 2025 at 5:08:10 PM

Category: Entity Parsing

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

Vector data 1: html_entities

Code used before fuzz:

const div = document.createElement('div');

Template used:

div.innerHTML='<a href="javascript$[data1]:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && log('$[data1]')

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

div.innerHTML='<a href="javascript&colon;:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && alert('&colon;')

div.innerHTML='<a href="javascript&NewLine;:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && alert('&NewLine;')

div.innerHTML='<a href="javascript&Tab;:">test</a>';0x0D
div.querySelector('a').protocol === 'javascript:' && alert('&Tab;')