Characters allowed before the JavaScript protocol colon

4

This tests for chars allowed before the colon in a Javascript uri format.

Created on: Monday, March 3, 2025 at 3:24:55 PM

Updated on: Friday, March 21, 2025 at 1:01:04 PM

Vector type: XSS

Vector charset: UTF-8

<script>window.onerror=x=>true;</script>
<base href="https://example.com" />

<a href="javascript$[chr]:" id=x></a>

x.protocol === 'javascript:' && log($[i])