Entities allowed after slashes on a protocol relative URL



You can place whitespace after slashes, this vector finds out what entities you can place after them.
Created by: hackvertor
Created on: Saturday, July 6, 2024 at 11:50:39 AM
Updated on: Monday, March 17, 2025 at 3:01:08 PM
Vector type: JS
Vector charset: UTF-8
Vector data 1: html_entities
Code used before fuzz:
const div = document.createElement('div')
Template used:
div.innerHTML='<a href="//$[data1]example.com">';
if(div.querySelector('a').host === 'example.com') {
log('$[data1]');
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
div.innerHTML='<a href="//\example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('\');
}
div.innerHTML='<a href="//@example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('@');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
div.innerHTML='<a href="//
example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('
');
}
div.innerHTML='<a href="//⁠example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('⁠');
}
div.innerHTML='<a href="//­example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('­');
}
div.innerHTML='<a href="///example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('/');
}
div.innerHTML='<a href="//	example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('	');
}
div.innerHTML='<a href="//​example.com">';
if(div.querySelector('a').host === 'example.com') {
alert('​');
}
Fuzz results

Safari 17.5 mobile iOS 17.5.1
Updated
Sat Jul 06 2024
Found 12 results
Loading...

Chrome 126.0.0.0 desktop macOS 10.15.7
Updated
Sat Jul 06 2024
Found 12 results
Loading...

Firefox 127.0 desktop macOS 10.15
Updated
Sat Jul 06 2024
Found 12 results
Loading...