1
1
1
1Vector to check if any character can be used to ignore https:// scheme in URL
if (new URL("https://$[chr]javascript:alert()").protocol=="javascript:"){log($[i])}if (new URL("https://0x00javascript:alert()").protocol=="javascript:"){alert(0)}