Chars allowed before domain

Checks which characters are allowed before a domain name.

Created byt0xodile

Created Sep 24, 2024

Updated May 27, 2025

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<a href="https://$[chr].example.com/" id="test$[i]"></a>

Code used after fuzz:

if(document.getElementById("test$[i]").href == "https://$[chr].example.com/"){log(document.getElementById("test$[i]").href)}

Sample payloads

<a href="https://0x00.example.com/" id="test0"></a>