Scheme slash alternatives in URL() when a base is used

⚠ Browser differences

48

48

32

Characters that cause URL() to treat the provided url as a relative url when a base is used, and as an absolute url when no base is used. Based on the writeup: https://blog.vitorfalcao.com/posts/intigriti-0525-writeup/#checks-vs-usage-a-subtle-difference

Created on: Thursday, May 22, 2025 at 9:03:44 AM

Updated on: Wednesday, May 28, 2025 at 5:06:18 PM

Category: URL Handling

Vector visibility: Public

Vector type: JS

Vector charset: UTF-8

(new URL("https:" + String.fromCodePoint($[i]) + "example.com","https://shazzer.co.uk").origin === new URL("https://shazzer.co.uk").origin) && (new URL("https:" + String.fromCodePoint($[i]) + "example.com").origin === new URL("https://example.com").origin) && log($[i] + " >> " + String.fromCodePoint($[i]))0x0D
0x0D