CIRCLE WITH A DOT

Shazzer had an interesting bug. I write to a blob URL thats sandboxed but because its a blob URL it breaks relative URLs which means vectors with them would return false negatives. The fix was: use a base tag to change the domain. This fixes vectors like:

relative & protocol relative url starting with a slash and not immediately having a slash after it. - Shazzer

test

(shazzer.co.uk)

@freddy Yeah it used JS for some aspects but still cool. I think we're not far from doing it in CSS/HTML only

@freddy So cool!!!