All VectorsVector nameUser Created Type Likes 1 1 1Difference between browser-supported handlers and Shazzer 'all_browser_events' listhansmach1ne1/5/2025JS0 3 3 3 3Characters that act as array literalshackvertor6/24/2024JS0 25 25 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 16 16 16 16Characters after stringshackvertor4/3/2024JS0 47 47 47Characters appended at the end of TLD within URL, which yield in the same host propertyInsertScript1/10/2025JS0 46 46 46Characters Allowed Between Protocol // and localhost Where Host Still Equals localhostrootd4ddy3/2/2025JS0 1 1 1Url parsing diff b/w window.open and new URLSudistark2/21/2025JS0 1 1 1JavaScript Scheme starting with https://BinaryScary6/28/2024JS4 46 46 46Characters prepended to URL, which yield in the same host propertyInsertScript1/10/2025JS0 1 1 1Characters prepended to URL host. check if difference between URL and a tagInsertScript1/10/2025JS0 3 3 3 3HTML entities inside JavaScript URL before colonhackvertor6/25/2024JS0 50 50 50 50HTML entities that create ASCII characters inside a JavaScript URLhackvertor6/25/2024JS4 35 35 35 35Entities still parsed in uppercasehackvertor7/2/2024JS0⚠ Browser differences 1 1 1 4Entities allowed between slashes on a protocol relative URLhackvertor7/6/2024JS0⚠ Browser differences 49k 49k 49k 136.3kCharacters that are valid JS variableshackvertor4/29/2024JS0⚠ Browser differences 1 1 1 12Entities allowed after slashes on a protocol relative URLhackvertor7/6/2024JS0⚠ Browser differences 1 1 1 4Entities allowed before slashes on a protocol relative URLhackvertor7/6/2024JS0⚠ Browser differences 45 45 45 29Characters allowed within a hostname but don't change the hostnameThomasOrlita4/30/2024JS1⚠ Browser differences 1 1 1 9Entities allowed inside hosthackvertor7/6/2024JS0 1 1 1 1test0x999-x4/10/2024JS0Found 248 recordsPage 9 of 13«45678910111213»