All VectorsVector nameUser Created Type Likes 1 1 1Quotesdogspyagent7/13/2024XSS0 1 1 1React DOM srcIDKdir7/15/2024JS0 48 48 48Scheme slash alternatives in URL() when a base is usedN25sec5/22/2025JS0⚠ Browser differences 6 5 6 5Tags that DO NOT support HTML commentshackvertor1/26/2025XSS0 2 2 2 2Tags that HTML encode it's contentshackvertor7/16/2024XSS0⚠ Browser differences 10 11 10 11Tags that cause child tags not to be found in the DOMhackvertor7/18/2024HTML0 14 14 14 14Tags that get moved out of parenthackvertor1/22/2025XSS0 108 108 108 108Tags that get reordered in the DOMhackvertor1/21/2025XSS0⚠ Browser differences 16 17 16 17Tags that remove the span or are self closinghackvertor7/16/2024XSS0⚠ Browser differences 8 9 8 9Tags that stop stylehackvertor4/9/2024HTML0⚠ Browser differences 105 106 105Tags that support HTML commentshackvertor1/26/2025XSS0 6 6 6ToUpperCase Improper Character MorphingIDKdir7/13/2024JS1 4 4 4 4URL domain dot alternativesJorianWoltjer9/10/2024JS5⚠ Browser differences 1 1 1 17URL scheme separator alternativessimoneonofri11/14/2024JS1⚠ Browser differences 1.4k 1.4k 1.4k 1.4kUnicode "Latin" characters using \p{scx=Latin} RegExJorianWoltjer12/5/2025JS0 12 12 12Unicode characters that get normalized into path traversal characters hackvertor12/12/2024JS2 175 175 175 175Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains0x999-x5/7/2025XSS1⚠ Browser differences 1 1 1 280Url parsing diff b/w anchor.href and new URLSudistark5/26/2025JS0 1 1 1Url parsing diff b/w window.open and new URLSudistark2/21/2025JS0⚠ Browser differences 48 48 48 32Valid characters before domain 1avlidienbrunn4/10/2024XSS0Found 245 recordsPage 11 of 13«45678910111213»
