Characters that can be inside the javascript protocol

3

Characters that can be inside the javascript protocol in html

Created on: Wednesday, January 22, 2025 at 9:23:42 AM

Updated on: Wednesday, January 22, 2025 at 9:32:50 PM

Vector type: XSS

Vector charset: UTF-8

<a href="java$[chr]script:test.com/" id="test"></a>

if(document.getElementById("test").protocol=="javascript:"){log($[i])}