JavaScript Scheme starting with http
Vector to check if any character can be used to ignore https scheme in URL
Created byBinaryScary
Created Jul 16, 2024
Updated May 28, 2025
Detecting browser...
CategoryURL Handling
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
log(new URL("http$[chr]javascript:alert()").protocol)Sample payloads
alert(new URL("http0x00javascript:alert()").protocol)Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 40 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 40 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 40 results
Loading...
Safari 0 mobile iOS 26.2.1
Updated18 Feb 2026
Found 40 results
Loading...