| Characters allowed in colon entity | InsertScript | 9/19/2024 | XSS | 0 |
| Character allowed after onerror event | InsertScript | 4/2/2024 | XSS | 0 |
| characters after slash that make a http protocol | InsertScript | 4/3/2024 | XSS | 0 |
| JavaScript separators between function names | InsertScript | 4/2/2024 | JS | 0 |
 5 | Characters allowed between multiple HTML attributes | JorianWoltjer | 9/12/2024 | XSS | 0 |
2 | JIS X 0208 bytes that produce ASCII characters | JorianWoltjer | 9/22/2024 | JS | 1 |
1 | Characters that change length on .toLowerCase() | JorianWoltjer | 4/11/2024 | JS | 0 |
4 | URL domain dot alternatives | JorianWoltjer | 9/10/2024 | JS | 4 |
14 | Active formatting elements | JorianWoltjer | 5/1/2024 | XSS | 0 |
 1 | Includes Validation Chars Allowed | Simpsonpt | 10/8/2024 | JS | 0 |
6 | Characters that can work as attribute seperator | Sudistark | 8/17/2024 | JS | 0 |
7  7 | Characters between element name and > | ThomasOrlita | 4/15/2024 | HTML | 0 |
| Characters that change length on .toUpperCase() | ThomasOrlita | 4/15/2024 | JS | 0 |
| Characters allowed before javascript URL | ThomasOrlita | 4/15/2024 | JS | 0 |
1 1 | Characters between < and element name | ThomasOrlita | 4/15/2024 | HTML | 1 |
| Characters allowed after hostname but don't change the hostname | ThomasOrlita | 4/15/2024 | JS | 2 |
| Characters allowed within a hostname but don't change the hostname | ThomasOrlita | 4/30/2024 | JS | 1 |
| Characters allowed between hostname and / but don't change the hostname | ThomasOrlita | 4/15/2024 | JS | 4 |
4 | Characters allowed javascript and colon copy2 | avlidienbrunn | 9/29/2024 | JS | 0 |
| Valid characters before domain 1 | avlidienbrunn | 4/10/2024 | XSS | 0 |
