Comment Comment by AmazingTurtle Interesting, I just did http://nlsn.cf/54.I just found a "bug" that can be abused (in chrome at very least).URL('http:53') returns https://0.0.0.53 (it casts the int32 number to an ip address, dont' ask why). But window.location.replace behaves differently and treats it as a relative URL. parent AmazingTurtle 6 years ago
I just found a "bug" that can be abused (in chrome at very least).
URL('http:53') returns https://0.0.0.53 (it casts the int32 number to an ip address, dont' ask why). But window.location.replace behaves differently and treats it as a relative URL.