All VectorsVector nameUser Created Type Likes⚠ Browser differences 3 1 3 1Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1 1 1 1 1Properties that are accessible on locationhackvertor6/7/2024JS0 13 13 13 13Properties are accessible in a sandboxed iframehackvertor6/7/2024JS0 1 1 1 1Properties that leak the parent URL even when sandboxedhackvertor6/6/2024JS0⚠ Browser differences 92 126 125 79All properties on navigator (two levels of nesting deep)freddyb6/6/2024JS0⚠ Browser differences 121 122 125 128All events on windowhackvertor5/31/2024JS1⚠ Browser differences 1 5 5 5Properties that contain URLshackvertor5/31/2024JS2⚠ Browser differences 298 279 302 267document propertieshackvertor5/31/2024JS0⚠ Browser differences 985 987 1.2k 965Window propertieshackvertor5/31/2024JS0 2 2 2 2Characters that act as attribute quotes copyfreddyb5/31/2024XSS0⚠ Browser differences 74 75 74 75Characters not urlencoded when using the credentials part of the URLhackvertor5/28/2024JS1 2 2 2 2Characters that act as attribute quoteshackvertor5/28/2024XSS0 7 7 7 7Characters ignored in an attribute namehackvertor5/28/2024XSS0 24 24 24Characters that can be used in eval to write code in betweenm-boll5/12/2024JS0 1 1 1 1Characters to break out from eval stringm-boll5/12/2024JS0 1 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 25 25 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0 1 1 1Characters allowed between < and element felipecaon5/6/2024HTML0 1 1 1Attribute separatorstr3w5/6/2024HTML0 25 25 25 25Characters allowed after optional chaininghackvertor5/4/2024JS2Found 256 recordsPage 10 of 13«45678910111213»
