Characters not urlencoded when using the shema part of the URL

Safari logo 2
Firefox logo 2
Chrome logo 2

This vector shows which characters are not encoded in the schema part of the URL.

Created by: d0ge

Created on: Tuesday, September 24, 2024 at 9:24:15 AM

Updated on: Tuesday, December 17, 2024 at 6:00:55 PM

Vector type: JS

Vector charset: UTF-8

Code used before fuzz:
const anchor = document.createElement('a');
Template used:
anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint($[i]) + ':';
if(!/http:/.test(anchor.protocol+''))log($[i])
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint(83) + ':';
if(!/http:/.test(anchor.protocol+''))alert(83)
anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint(115) + ':';
if(!/http:/.test(anchor.protocol+''))alert(115)

Fuzz results

Safari logo
Safari 17.6 desktop macOS 10.15.7

Updated

Tue Sep 24 2024
Found 2 results
Loading...
Firefox logo
Firefox 130.0 desktop macOS 10.15

Updated

Tue Sep 24 2024
Found 2 results
Loading...
Chrome logo
Chrome 129.0.0.0 desktop macOS 10.15.7

Updated

Tue Sep 24 2024
Found 2 results
Loading...