Break out of CSS strings

This vector shows what characters allow you to break out of CSS strings.

Created by: Gareth Heyes

Created on: 4/4/2024, 11:36:44 AM

Updated on: 5/6/2024, 1:54:07 PM

Vector type: HTML

Template used:
<div style="font-family:'x$[chr];color:red;';">test</div>

Your browser was detected as:
Detecting... Detecting...

Fuzz results:

Chrome logo
Chrome 124.0.0.0
Results
Found 4
DecHexChr
100aLF
DecHexChr
120cFF
DecHexChr
130dCR
DecHexChr
3927'
Firefox logo
Firefox 124.0
Results
Found 4
DecHexChr
100aLF
DecHexChr
120cFF
DecHexChr
130dCR
DecHexChr
3927'
Safari logo
Safari 17.4
Results
Found 4
DecHexChr
100aLF
DecHexChr
120cFF
DecHexChr
130dCR
DecHexChr
3927'