Injection in src attribute PORT, characters that change hostname
try{
img = document.createElement("img");
img.src=`https://example.com:1$[chr]1`;
url = new URL(img.src);
if(url.hostname != "example.com"){
log($[i]);
}
} catch{}try{
img = document.createElement("img");
img.src=`https://example.com:1@1`;
url = new URL(img.src);
if(url.hostname != "example.com"){
alert(64);
}
} catch{}