HTML elements that parse differently when rendered

This shows which elements change in the DOM when nested.

Created by: Gareth Heyes

Created on: 4/19/2024, 11:30:14 AM

Updated on: 5/17/2024, 3:47:54 AM

Vector type: XSS

Template used:
<$[data1] id=x><$[data1]></$[data1]></$[data1]>

Code used after fuzz:
const element = document.getElementById('x'); if(element && !element.querySelector('$[data1]')) { log('$[data1]'); }

Your browser was detected as:
Detecting... Detecting...

Fuzz results:

Firefox logo
Firefox 125.0
Results
Found 35
Data
a
Data
area
Data
base
Data
br
Data
button
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp
Safari logo
Safari 17.4.1
Results
Found 34
Data
a
Data
area
Data
base
Data
br
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp
Chrome logo
Chrome 124.0.0.0
Results
Found 34
Data
a
Data
area
Data
base
Data
br
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp