Characters not urlencoded when using the shema part of the URL

Safari logo 2
Firefox logo 2
Chrome logo 2

This vector shows which characters are not encoded in the schema part of the URL.

Created by: d0ge

Created on: Tuesday, September 24, 2024 at 9:24:15 AM

Updated on: Monday, September 30, 2024 at 8:00:10 AM

Vector type: JS

Code used before fuzz:
const anchor = document.createElement('a');
Template used:
anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint($[i]) + ':';
if(!/http:/.test(anchor.protocol+''))log($[i])
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint(83) + ':';
if(!/http:/.test(anchor.protocol+''))alert(83)
anchor.href='http://example.com';
anchor.protocol = 'http' + String.fromCodePoint(115) + ':';
if(!/http:/.test(anchor.protocol+''))alert(115)

Fuzz results

Safari logo
Safari 17.6 desktop macOS 10.15.7

Updated

Tue Sep 24 2024
Found 2 results
DecHexChr
8353S
DecHexChr
11573s
Firefox logo
Firefox 130.0 desktop macOS 10.15

Updated

Tue Sep 24 2024
Found 2 results
DecHexChr
8353S
DecHexChr
11573s
Chrome logo
Chrome 129.0.0.0 desktop macOS 10.15.7

Updated

Tue Sep 24 2024
Found 2 results
DecHexChr
8353S
DecHexChr
11573s