| Valid characters before domain 1 | avlidienbrunn | 4/10/2024 | XSS | 0 |
 4 | Characters allowed javascript and colon copy2 | avlidienbrunn | 9/29/2024 | JS | 0 |
9 | XSS vectors that consume tag | Y4tacker | 11/5/2024 | XSS | 2 |
| Characters that change length on .toUpperCase() | ThomasOrlita | 4/15/2024 | JS | 0 |
| Characters allowed before javascript URL | ThomasOrlita | 4/15/2024 | JS | 0 |
1  1 | Characters between < and element name | ThomasOrlita | 4/15/2024 | HTML | 1 |
7 7 | Characters between element name and > | ThomasOrlita | 4/15/2024 | HTML | 0 |
| Characters allowed after hostname but don't change the hostname | ThomasOrlita | 4/15/2024 | JS | 2 |
| Characters allowed between hostname and / but don't change the hostname | ThomasOrlita | 4/15/2024 | JS | 4 |
| Characters allowed within a hostname but don't change the hostname | ThomasOrlita | 4/30/2024 | JS | 1 |
6 | Characters that can work as attribute seperator | Sudistark | 8/17/2024 | JS | 0 |
 1 | Includes Validation Chars Allowed | Simpsonpt | 10/8/2024 | JS | 1 |
| Characters that can precede the javascript protocol copy2 | PinkDraconian | 11/7/2024 | XSS | 0 |
3 | Characters allowed javascript and colon copy2 copy2 | PinkDraconian | 11/7/2024 | JS | 0 |
4 | URL domain dot alternatives | JorianWoltjer | 9/10/2024 | JS | 4 |
5 | Characters allowed between multiple HTML attributes | JorianWoltjer | 9/12/2024 | XSS | 2 |
2 | JIS X 0208 bytes that produce ASCII characters | JorianWoltjer | 9/22/2024 | JS | 1 |
14 | Active formatting elements | JorianWoltjer | 5/1/2024 | XSS | 0 |
1 | Characters that change length on .toLowerCase() | JorianWoltjer | 4/11/2024 | JS | 0 |
4 | Entities allowed between two forward slashes | InsertScript | 9/19/2024 | XSS | 1 |
