Shazzer logo

Characters allowed in colon entity

Chrome logo 1
Firefox logo 1
Edge logo 1

This vector shows if a character is allowed in an entity. Firefox did that in the past

InsertScript
Created byInsertScript
Created Sep 19, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryEntity Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<a href="javascript&colo$[chr]n;abcd" id="x">f</a>0x0D
Code used after fuzz:
try{0x0D
if(x.protocol == "javascript:")log($[i])0x0D
}catch(e){}

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 1 result
Loading...
Firefox logo
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 1 result
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 1 result
Loading...