| Url parsing diff b/w window.open and new URL | Sudistark | 2/21/2025 | JS | 0 |
 6 | Characters that can work as attribute seperator | Sudistark | 8/17/2024 | JS | 0 |
 1 | Includes Validation Chars Allowed | Simpsonpt | 10/8/2024 | JS | 1 |
4 | Characters allowed before the JavaScript protocol colon | RemakingEden | 3/3/2025 | XSS | 0 |
3 | Characters allowed javascript and colon copy2 copy2 | PinkDraconian | 11/7/2024 | JS | 0 |
| Characters that can precede the javascript protocol copy2 | PinkDraconian | 11/7/2024 | XSS | 0 |
4 | URL domain dot alternatives | JorianWoltjer | 9/10/2024 | JS | 5 |
5 | Characters allowed between multiple HTML attributes | JorianWoltjer | 9/12/2024 | XSS | 2 |
2 | JIS X 0208 bytes that produce ASCII characters | JorianWoltjer | 9/22/2024 | JS | 1 |
14 | Active formatting elements | JorianWoltjer | 5/1/2024 | XSS | 0 |
1 | Characters that change length on .toLowerCase() | JorianWoltjer | 4/11/2024 | JS | 1 |
4 | Entities allowed between two forward slashes | InsertScript | 9/19/2024 | XSS | 1 |
| Characters allowed in colon entity | InsertScript | 9/19/2024 | XSS | 0 |
| Character that closes HTML tag | InsertScript | 4/2/2024 | HTML | 0 |
1 | characters allowed between exclamation mark and greater then | InsertScript | 6/18/2024 | HTML | 0 |
| Characters prepended to URL host. check if difference between URL and a tag | InsertScript | 1/10/2025 | JS | 0 |
30 | Characters prepended to URL, which yield in the same host property | InsertScript | 1/10/2025 | JS | 0 |
31 | Characters appended at the end of TLD within URL, which yield in the same host property | InsertScript | 1/10/2025 | JS | 0 |
| characters after slash that make a http protocol | InsertScript | 4/3/2024 | XSS | 0 |
| Character allowed after onerror event | InsertScript | 4/2/2024 | XSS | 0 |
