All VectorsVector nameUser Created Type Likes 33 33 33Characters allowed before javascript URLThomasOrlita4/15/2024JS0 278 278 278Characters allowed between hostname and / but don't change the hostnameThomasOrlita4/15/2024JS4 280Url parsing diff b/w anchor.href and new URLSudistark5/26/2025JS0 6Characters that can work as attribute seperatorSudistark8/17/2024JS0Url parsing diff b/w window.open and new URLSudistark2/21/2025JS0 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1 67 65 67 67Characters allowed inside javascript protocol and still returns the hostnameRenwaX237/21/2025JS2 4 4Characters allowed before the JavaScript protocol colonRemakingEden3/3/2025XSS0Electron XSS TESTP4rkJW10/22/2025HTML0dsqdNikolaT3esla10/1/2025HTML0 32 32 32Scheme slash alternatives in URL() when a base is usedN25sec5/22/2025JS0 5 5Characters allowed between multiple HTML attributesJorianWoltjer9/12/2024XSS4 2JIS X 0208 bytes that produce ASCII charactersJorianWoltjer9/22/2024JS1 4 4 4URL domain dot alternativesJorianWoltjer9/10/2024JS5 65.4k 65.4k 65.4kCharacters encoded by escape()JorianWoltjer7/4/2025JS1 63.4k 63.4k 63.4kCharacters encoded by encodeURI()JorianWoltjer7/4/2025JS1 63.4k 63.4k 63.4kCharacters encoded by encodeURIComponent()JorianWoltjer7/4/2025JS1 1Characters that change length on .toLowerCase()JorianWoltjer4/11/2024JS1 14Active formatting elementsJorianWoltjer5/1/2024XSS0 4Entities allowed between two forward slashesInsertScript9/19/2024XSS1Found 240 recordsPage 10 of 12«3456789101112»
