Tom Scott explains this beautifully in his video: The Link That Can Crash Chrome: http://a/%%30%30 Steps: 1. http://a/%%30%30 becomes http://a/%00 because %30 is 0 2. http://a/%00 becomes http://a/<NULL> because %00 is the NULL character