Injection in src attribute PORT, characters that change hostname

1

1

1

Injection in src attribute PORT, characters that change hostname

Created on: Sunday, June 15, 2025 at 6:15:55 PM

Updated on: Sunday, June 15, 2025 at 6:16:39 PM

Vector type: JS

Vector charset: UTF-8

try{
img = document.createElement("img");
img.src=`https://example.com:1$[chr]1`;
url = new URL(img.src);
if(url.hostname != "example.com"){
  log($[i]);
}
} catch{}