1
1
1Characters ignored in URL, which yield in the same host property. Additionally it checks if the HTML a tag parses anything differently. This is just a simple modification of another fuzzing vector by hansmachine. It should not produce any results
if (new URL("https://a.com$[chr]/b").host=="a.com"){
var t=document.createElement("a");
t.href="https://a.com$[chr]/b";
if (t.host != "a.com")
{
log($[i]);
}
}
if (new URL("https://$[chr]a.com/b").host=="a.com"){
var t=document.createElement("a");
t.href="https://$[chr]a.com/b";
if (t.host != "a.com")
{
log($[i]);
}
}