JavaScript Scheme starting with http
Vector to check if any character can be used to ignore https scheme in URL
Created byBinaryScary
Created Jul 16, 2024
Updated May 28, 2025
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
log(new URL("http$[chr]javascript:alert()").protocol)Sample payloads
alert(new URL("http0x00javascript:alert()").protocol)Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated25 Jan 2026
Found 40 results
Loading...
Firefox 147.0 desktop Windows NT 10.0
Updated27 Jan 2026
Found 40 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated26 Jan 2026
Found 40 results
Loading...