| Characters transformed when using uppercase | hackvertor | 11/18/2024 | JS | 0 |
| Characters that cause exceptions when URL encoded | hackvertor | 10/3/2024 | JS | 2 |
| Characters allowed javascript and colon | renniepak | 4/9/2024 | JS | 3 |
| Characters allowed between an object and bracket notation | cold-try | 4/15/2024 | JS | 0 |
| HTML entities that create ASCII characters inside a JavaScript URL | hackvertor | 6/25/2024 | JS | 4 |
 1 | Includes Validation Chars Allowed | Simpsonpt | 10/8/2024 | JS | 1 |
| Entities still parsed in uppercase | hackvertor | 7/2/2024 | JS | 0 |
| Characters not urlencoded when using the shema part of the URL | d0ge | 9/24/2024 | JS | 0 |
| JavaScript Scheme starting with http | BinaryScary | 7/16/2024 | JS | 1 |
| HTML entities inside JavaScript URL before colon | hackvertor | 6/25/2024 | JS | 0 |
| Characters transformed when using lowercase | hackvertor | 11/18/2024 | JS | 0 |
 2  2 | HTML entities before JavaScript URL | hackvertor | 6/25/2024 | JS | 0 |
| Characters allowed between in operator | hackvertor | 4/3/2024 | JS | 0 |
3 | Characters allowed between slashes | hackvertor | 4/8/2024 | JS | 0 |
20 | Difference between browser-supported handlers and Shazzer 'events' list | hansmach1ne | 1/5/2025 | JS | 0 |
16 | Difference between browser-supported handlers and Shazzer 'all_browser_events' list | hansmach1ne | 1/5/2025 | JS | 0 |
| JavaScript Scheme starting with https:// | BinaryScary | 6/28/2024 | JS | 4 |
25 | Loose comparison, characters appended which still result in type coercion | hansmach1ne | 1/6/2025 | JS | 0 |
| Characters allowed after parentheses | hackvertor | 4/1/2024 | JS | 0 |
4 4 | Characters that can break out of a single line comment | 0x999-x | 4/10/2024 | JS | 0 |
