Evaluating...

Includes Validation Chars Allowed

Check for chars allowed before the string to validate.

Novice Fuzzer

Created bySimpsonpt

Created Oct 8, 2024

Updated Sep 5, 2026

Unable to render tweet button

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

if (['https:'].includes("$[chr]https:")){
    log($[i])
}

Sample payloads

if (['https:'].includes("\https:")){
    alert(92)
}