Re:Show HN: I created a URL shortener that can be entirely h...
by philshem on Monday November 16, 2020 @11:52AM
(#25113889)
You should submit this bug as an issue in the repository.
Oh, wait.
Oh, wait.
I just found a "bug" that can be abused (in chrome at very least).
URL('http:53') returns https://0.0.0.53 (it casts the int32 number to an ip address, dont' ask why). But window.location.replace behaves differently and treats it as a relative URL.