| All properties on navigator (two levels of nesting deep) | freddyb | 6/6/2024 | JS | 0 |
 6 | Characters allowed before onerror events | hackvertor | 3/30/2024 | XSS | 0 |
 31 | Characters allowed after greater than in events | hackvertor | 6/21/2024 | XSS | 0 |
| document properties | hackvertor | 5/31/2024 | JS | 0 |
25 | Characters allowed before optional chaining | hackvertor | 5/4/2024 | JS | 0 |
| framers event executors | weizman | 4/10/2024 | XSS | 0 |
| Properties that leak the parent URL even when sandboxed | hackvertor | 6/6/2024 | JS | 0 |
| HTML entities inside JavaScript URL before colon | hackvertor | 6/25/2024 | JS | 0 |
32 | Characters that can precede the javascript protocol copy | rcbarnett | 5/2/2024 | XSS | 0 |
| Characters allowed in-between hyphens | hackvertor | 4/14/2024 | XSS | 0 |
| Characters allowed between an object and the dot operator | cold-try | 4/15/2024 | JS | 0 |
25 | Valid characters between function and parenthesis | felipecaon | 5/6/2024 | JS | 0 |
| Characters that act as parentheses | hackvertor | 6/24/2024 | JS | 0 |
| characters after slash that make a http protocol | InsertScript | 4/3/2024 | XSS | 0 |
| HTML entities inside JavaScript URL | hackvertor | 6/25/2024 | JS | 0 |
| Entities allowed between function calls | hackvertor | 6/29/2024 | XSS | 0 |
2 2 | HTML entities before JavaScript URL | hackvertor | 6/25/2024 | JS | 0 |
| Tags that stop style | hackvertor | 4/9/2024 | HTML | 0 |
| Characters that can be inserted in the middle of the JS protocol name | cold-try | 4/15/2024 | XSS | 0 |
| Characters that act as attribute quotes | hackvertor | 5/28/2024 | XSS | 0 |
