Entities allowed between two forward slashes

Quick check what entities is allowed between two slashes in regards to a protocol "//"

Created Sep 19, 2024

Updated May 27, 2025

Detecting browser...

CategoryEntity Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholderhtml_entities

Template used:

<a href="/$[data1]/test.com/" id=x></a>

Code used after fuzz:

if(x.host == "test.com")log('$[data1]')

Sample payloads

<a href="/&bsol;/test.com/" id=x></a>

<a href="/&NewLine;/test.com/" id=x></a>

<a href="/&sol;/test.com/" id=x></a>

<a href="/&Tab;/test.com/" id=x></a>