Hacker News Reader

Comment by gibybo | Hacker News Reader

I used "//" to get around the http regex (but this requires using an https host as you mentioned), is there another way to get around the regex?

Adding a space just before the URL works just as well.

Spoiler: RaNDoM cApS

//www.google.com/jsapi?callback=alert

data:,alert('hi')

Use upper-case characters

i think ftp:// works too

EDIT: no, it doesn't :D