# URL Validation Bypass Cheat Sheet Adds IP Address Formats and a New Userinfo Parsing Payload

DevFeed: [URL Validation Bypass Cheat Sheet Adds IP Address Formats and a New Userinfo Parsing Payload](<https://devfeed.tech/articles/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet-7690.md>)

Original publisher: [Read original article](<https://portswigger.net/research/new-crazy-payloads-in-the-url-validation-bypass-cheat-sheet>)

Author: Zakhar Fedotkin

Published: 2024-10-29T13:59:13Z

Content type: release

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Web](<https://devfeed.tech/topics/web.md>), [browsers](<https://devfeed.tech/topics/browsers.md>), [Chrome](<https://devfeed.tech/topics/chrome.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [Cross-origin resource sharing (CORS)](<https://devfeed.tech/topics/cors.md>)

Tags: [chrome](<https://devfeed.tech/tags/chrome.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [security](<https://devfeed.tech/tags/security.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>), [web](<https://devfeed.tech/tags/web.md>)

## AI overview

This update to the URL Validation Bypass Cheat Sheet adds new IPv4 representations, IPv6 support, configurable character encodings, and a payload targeting differences in userinfo parsing. The article says the payload may expose vulnerabilities such as open redirects or SSRF and describes reproducing a separate patched exploit.

## Source excerpt

The strength of our URL Validation Bypass Cheat Sheet lies in the contributions from the web security community, and today's update is no exception. We are excited to introduce a new and improved IP a