List of HTML elements that convert to arbitrary string

When an element is used as a string it is converted using toString. Most elements convert to something like [object HTMLDivElement] but some dont

Created by: Johan Carlsson

Created on: 4/10/2024, 12:48:20 PM

Updated on: 5/9/2024, 6:17:30 AM

Vector type: XSS

Template used:
<$[data1] id="x"></$[data1]>

Code used after fuzz:
x.toString().startsWith('[') || log('$[data1]')