Source code
Revision control
Copy as Markdown
Other Tools
<!DOCTYPE html>
<meta charset=utf-8>
<title>valid src</title>
<iframe src="a:foo.com"></iframe><!-- scheme-private -->
<iframe src="foo:/"></iframe><!-- scheme-private-slash -->
<iframe src="foo://"></iframe><!-- scheme-private-slash-slash -->
<iframe src="foo:/bar.com/"></iframe><!-- scheme-private-path -->
<iframe src="c:/foo"></iframe><!-- scheme-private-single-letter -->
<iframe src="madeupscheme:/example.com/"></iframe><!-- scheme-private-single-slash -->
<iframe src="file:/example.com/"></iframe><!-- scheme-file-single-slash -->
<iframe src="ftps:/example.com/"></iframe><!-- scheme-ftps-single-slash -->
<iframe src="gopher:/example.com/"></iframe><!-- scheme-gopher-single-slash -->
<iframe src="ws:/example.com/"></iframe><!-- scheme-ws-single-slash -->
<iframe src="wss:/example.com/"></iframe><!-- scheme-wss-single-slash -->
<iframe src="javascript:/example.com/"></iframe><!-- scheme-javascript-single-slash -->
<iframe src="mailto:/example.com/"></iframe><!-- scheme-mailto-single-slash -->
<iframe src="madeupscheme:example.com/"></iframe><!-- scheme-private-no-slash -->
<iframe src="ftps:example.com/"></iframe><!-- scheme-ftps-no-slash -->
<iframe src="gopher:example.com/"></iframe><!-- scheme-gopher-no-slash -->
<iframe src="wss:example.com/"></iframe><!-- scheme-wss-no-slash -->
<iframe src="mailto:example.com/"></iframe><!-- scheme-mailto-no-slash -->
<iframe src="data:text/plain,foo"></iframe><!-- scheme-data-no-slash -->
<iframe src="http💩//:foo"></iframe><!-- path-contains-pile-of-poo -->
<iframe src="http://%25DOMAIN:foobar@foodomain.com"></iframe><!-- userinfo-username-contains-percent-encoded -->
<iframe src="//foo/bar"></iframe><!-- scheme-schemeless-relative -->
<iframe src="/"></iframe><!-- path-slash-only-relative -->
<iframe src="/a/b/c"></iframe><!-- path-simple-relative -->
<iframe src="/a%2fc"></iframe><!-- path-percent-encoded-slash-relative -->
<iframe src="/a/%2f/c"></iframe><!-- path-percent-encoded-slash-plus-slashes-relative -->
<iframe src="?"></iframe><!-- query-empty-no-path-relative -->
<iframe src="#"></iframe><!-- fragment-empty-hash-only-no-path-relative -->
<iframe src="#/"></iframe><!-- fragment-slash-relative -->
<iframe src="#;?"></iframe><!-- fragment-semicolon-question-mark-relative -->
<iframe src="#β"></iframe><!-- fragment-non-ascii-relative -->
<iframe src="foo.com"></iframe><!-- scheme-none-relative -->
<iframe src=":"></iframe><!-- path-colon-relative -->
<iframe src=":a"></iframe><!-- path-leading-colon-letter-relative -->
<iframe src=":foo.com"></iframe><!-- path-leading-colon-chars-relative -->
<iframe src=":/"></iframe><!-- path-leading-colon-slash-relative -->
<iframe src=":#"></iframe><!-- path-leading-colon-hash-relative -->
<iframe src=":23"></iframe><!-- path-leading-colon-number-relative -->
<iframe src="/:23"></iframe><!-- path-slash-colon-number-relative -->
<iframe src="::"></iframe><!-- path-leading-colon-colon-relative -->
<iframe src="::23"></iframe><!-- path-colon-colon-number-relative -->
<iframe src="/💩"></iframe><!-- path-slash-pile-of-poo -->
<iframe src="file:"></iframe><!-- scheme-file-scheme-only -->
<iframe src="file:/"></iframe><!-- scheme-file-slash-only -->
<iframe src="file://"></iframe><!-- scheme-file-slash-slash-only -->
<iframe src="file:test"></iframe><!-- scheme-file-no-slash -->