Break out of CSS strings

This vector shows what characters allow you to break out of CSS strings.

Created on: Thursday, April 4, 2024 at 11:36:44 AM

Updated on: Thursday, July 25, 2024 at 1:32:56 AM

Vector type: HTML

Template used:
<div style="font-family:'x$[chr];color:red;';">test</div>

Your browser was detected as:

Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div style="font-family:'x
;color:red;';">test</div>

<div style="font-family:'x;color:red;';">test</div>

<div style="font-family:'x
;color:red;';">test</div>

<div style="font-family:'x';color:red;';">test</div>

Chrome 124.0.0.0 Unknown Unknown

Found 4 results

Show differences only?

Dec	Hex	Chr
10	0a	LF

Dec	Hex	Chr
12	0c	FF

Dec	Hex	Chr
13	0d	CR

Dec	Hex	Chr
39	27	'

Firefox 124.0 Unknown Unknown

Found 4 results

Show differences only?

Dec	Hex	Chr
10	0a	LF

Dec	Hex	Chr
12	0c	FF

Dec	Hex	Chr
13	0d	CR

Dec	Hex	Chr
39	27	'

Safari 17.4 Unknown Unknown

Found 4 results

Show differences only?

Dec	Hex	Chr
10	0a	LF

Dec	Hex	Chr
12	0c	FF

Dec	Hex	Chr
13	0d	CR

Dec	Hex	Chr
39	27	'