All VectorsVector nameUser Created Type Likes 18 18 18 18Entities allowed between function call and numberhackvertor7/2/2024XSS0 4 4 4 4Entities allowed before slashes which result in an external URLhackvertor1/16/2025XSS0⚠Browser differences 1 4 4 4Entities allowed before slashes on a protocol relative URLhackvertor7/6/2024JS0 19 19 19 19Entities allowed before function callshackvertor7/2/2024XSS0 577 577 577 577Entities allowed as JS variableshackvertor7/2/2024XSS1⚠Browser differences 1 18 18 12Entities allowed after slashes on a protocol relative URLhackvertor7/6/2024JS0 18 18 18 18Entities after protocol-relative URLhackvertor4/3/2026JS2 1 1 1 1Electron XSS TESTP4rkJW10/22/2025HTML0 63.3k 63.3k 63.3k 63.3kDifferences between escape vs encodeURIComponenthackvertor10/15/2024JS1⚠Browser differences 24 16 24Difference between browser-supported handlers and Shazzer 'events' listhansmach1ne1/5/2025JS0 1 1 1Difference between browser-supported handlers and Shazzer 'all_browser_events' listhansmach1ne1/5/2025JS0 1 1 1 1Decimal separators in parseFloatpiprett5/17/2026JS0 8 8 8 8DOM element relationshipsjoaxcar4/10/2024XSS0 8 8 8 8Consuming tagshackvertor4/8/2024HTML1 7 7 7 7Closing title tag name separatorsola4569/15/2025XSS0 1 1 1Chars that can be used as opening bracket in innerHTMLnollium4/19/2025JS1⚠Browser differences 2.1k 1 2.1kChars in href that will not default to full URLjoaxcar11/16/2024XSS0 5 5 5Chars allowed between src and = in img tagrootd4ddy3/2/2025XSS0 6 6 6 6Chars allowed before style attribute...t0xodile10/25/2025XSS0 1 1 1Chars allowed before domaint0xodile9/24/2024XSS0Found 256 recordsPage 6 of 13«12345678910»
