How does http: // a / %% 30% 30 work?

Yep, the link http://anything/%%30%30 causes my Google Chrome browser to crash even when I hover over it.

How it works?

+10
security google-chrome crash
source share
3 answers
Tom Scott explains this beautifully in his video: Link that could cause Chrome to crash: http: // a / %% 30% 30

Steps:

  • http://a/%%30%30 becomes http://a/%00 because %30 is 0
  • http://a/%00 becomes http://a/<NULL> because %00 is a NULL character

(see table ASCII )

The bug of Andris Atteki was fixed , which simply added a null character to the string.

+16
source

Expect this to no longer work (from 45).

0
source

http: // a / %% 30% 30

click on her I dare you hahahahahahah

0
source

All Articles