All VectorsVector nameUser Created Type Likes 2 2 2 2relative & protocol relative url starting with a slash and not immediately having a slash after it.Rhynorater3/28/2026JS0 1 1 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1⚠ Browser differences 1 1 1 280Url parsing diff b/w anchor.href and new URLSudistark5/26/2025JS0 1 1 1Url parsing diff b/w window.open and new URLSudistark2/21/2025JS0 6 6 6Characters that can work as attribute seperatorSudistark8/17/2024JS0⚠ Browser differences 80 80 80 64Characters allowed after hostname but don't change the hostnameThomasOrlita4/15/2024JS2 102 102 102 102Characters that change length on .toUpperCase()ThomasOrlita4/15/2024JS0 33 33 33 33Characters allowed before javascript URLThomasOrlita4/15/2024JS0 7 7 7 7Characters between element name and >ThomasOrlita4/15/2024HTML0 1 1 1 1Characters between < and element nameThomasOrlita4/15/2024HTML1⚠ Browser differences 50 50 50 302Characters allowed between hostname and / but don't change the hostnameThomasOrlita4/15/2024JS4⚠ Browser differences 45 45 45 29Characters allowed within a hostname but don't change the hostnameThomasOrlita4/30/2024JS1 127 127 127HTML TAGS ListsY4tacker1/3/2025XSS0 9 9 9XSS vectors that consume tagY4tacker11/5/2024XSS1 30 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 106 106 106 106Named HTML entities that can be closed with !avlidienbrunn7/29/2025XSS2⚠ Browser differences 48 48 48 32Valid characters before domain 1avlidienbrunn4/10/2024XSS0 4 4 4 4Characters allowed javascript and colon copy2avlidienbrunn9/29/2024JS0 1 1 1 1Characters allowed in between // in absolute URLbribes11/29/2025JS0 1 1 1 1Characters allowed in between @importbribes10/19/2025XSS0Found 249 recordsPage 4 of 13«12345678910»
