Characters allowed in colon entity

1

1

This vector shows if a character is allowed in an entity. Firefox did that in the past

Created on: Thursday, September 19, 2024 at 11:07:03 AM

Updated on: Tuesday, May 27, 2025 at 8:15:10 AM

Category: Entity Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

<a href="javascript&colo$[chr]n;abcd" id="x">f</a>0x0D

try{0x0D
if(x.protocol == "javascript:")log($[i])0x0D
}catch(e){}