All VectorsVector nameUser Created Type Likes 1 1 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1 1 1 1Entities in-between square brackets that close cdatahackvertor10/8/2024XSS1 63.3k 63.3k 63.3k 63.3kDifferences between escape vs encodeURIComponenthackvertor10/15/2024JS1⚠ Browser differences 3 1 3 1Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1 2 2 2HTML tags that can clobber the credentials part of the URL0x999-x11/4/2024XSS1 19 19 19HTML tags and attributes that can be used to access the URL0x999-x11/4/2024XSS1⚠ Browser differences 312 311 312 314Characters allowed at hostnamed0ge6/11/2024JS1 9 9 9XSS vectors that consume tagY4tacker11/5/2024XSS1 65.4k 65.4k 65.4k 65.4kCharacters encoded by escape()JorianWoltjer7/4/2025JS1 7 7 7 7Characters that close or encapsulate HTML attribute valuesola45611/5/2024XSS1 1 1 1 1Characters between < and element nameThomasOrlita4/15/2024HTML1⚠ Browser differences 1 1 1 17URL scheme separator alternativessimoneonofri11/14/2024JS1 29 29 29 29Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1 4 4 4 4Characters that act as new lines in multi line stringshackvertor6/20/2024JS1 2 2 2 2ISO-2022-JP ASCII escape sequencehackvertor12/11/2024XSS1 30 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 2 2 2Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1 2 2 2Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1 25 25 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 82 82 82 82encodeURI() not encoded with %forglockenspielexact7/11/2025JS1Found 248 recordsPage 10 of 13«45678910111213»
