Vector to check if any character can be used to ignore https scheme in URL
log(new URL("http$[chr]javascript:alert()").protocol)
alert(new URL("http0x00javascript:alert()").protocol)
40
40
40
40