HTML entities before JavaScript URL

Shows which HTML entities are allowed before the JavaScript protocol

Created by: hackvertor

Created on: 6/25/2024, 4:42:13 PM

Updated on: 7/14/2024, 3:19:16 PM

Vector type: JS

Code used before fuzz:
const div = document.createElement('div');
Template used:
div.innerHTML='<a href="$[data1]javascript:">test</a>';
div.querySelector('a').protocol === 'javascript:' && log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

div.innerHTML='<a href="&Tab;javascript:">test</a>';
div.querySelector('a').protocol === 'javascript:' && alert('&Tab;')
div.innerHTML='<a href="&NewLine;javascript:">test</a>';
div.querySelector('a').protocol === 'javascript:' && alert('&NewLine;')

Fuzz results

Safari logo
Safari 17.5 mobile iOS 17.5.1
Found 2 results
Data
&NewLine;
Data
&Tab;