Scheme slash alternatives in URL() when a base is used

Characters that cause URL() to treat the provided url as a relative url when a base is used, and as an absolute url when no base is used. Based on the writeup: https://blog.vitorfalcao.com/posts/intigriti-0525-writeup/#checks-vs-usage-a-subtle-difference

Created by: N25sec

Created on: Thursday, May 22, 2025 at 9:03:44 AM

Updated on: Thursday, May 22, 2025 at 12:00:30 PM

Vector type: JS

Vector charset: UTF-8

Template used:
(new URL("https:" + String.fromCodePoint($[i]) + "example.com","https://shazzer.co.uk").origin === new URL("https://shazzer.co.uk").origin) && (new URL("https:" + String.fromCodePoint($[i]) + "example.com").origin === new URL("https://example.com").origin) && log($[i] + " >> " + String.fromCodePoint($[i]))

Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Fuzz results

No results found.