JavaScript Scheme starting with http
Vector to check if any character can be used to ignore https scheme in URL
Created byBinaryScary
Created Jul 16, 2024
Updated May 28, 2025
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
log(new URL("http$[chr]javascript:alert()").protocol)Sample payloads
alert(new URL("http0x00javascript:alert()").protocol)Fuzz results
Chrome 148.0.0.0 desktop Windows NT 10.0
Updated15 Mar 2026
Found 40 results
Loading...
Chrome 146.0.7680.40 mobile iOS 26.3.1older version
Updated30 Mar 2026
Found 40 results
Loading...
Chrome 146.0.0.0 desktop macOS 10.15.7older version
Updated8 Apr 2026
Found 40 results
Loading...
Firefox 149.0 desktop macOS 10.15
Updated3 Apr 2026
Found 40 results
Loading...
Firefox 148.0 desktop Windows NT 10.0older version
Updated23 Feb 2026
Found 40 results
Loading...
Firefox 145.0 desktop Linux Unknownolder version
Updated5 Apr 2026
Found 40 results
Loading...
Microsoft Edge 146.0.0.0 desktop Windows NT 10.0
Updated31 Mar 2026
Found 40 results
Loading...
Safari 0 mobile iOS 26.2.1
Updated18 Feb 2026
Found 40 results
Loading...