Characters allowed before the JavaScript protocol colon

4

This tests for chars allowed before the colon in a Javascript uri format.

Created on: Monday, March 3, 2025 at 3:24:55 PM

Updated on: Monday, April 28, 2025 at 7:27:33 AM

Vector type: XSS

Vector charset: UTF-8

<script>window.onerror=x=>true;</script>
<base href="https://example.com" />

<a href="javascript$[chr]:" id=x></a>

x.protocol === 'javascript:' && log($[i])