Break out of CSS strings

Firefox logo 4
Safari logo 4
Chrome logo 4

This vector shows what characters allow you to break out of CSS strings.

Created by: hackvertor

Created on: Thursday, April 4, 2024 at 11:36:44 AM

Updated on: Thursday, November 21, 2024 at 7:38:17 AM

Vector type: HTML

Vector charset: UTF-8

Template used:
<div style="font-family:'x$[chr];color:red;';">test</div>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div style="font-family:'x
;color:red;';">test</div>
<div style="font-family:'x;color:red;';">test</div>
<div style="font-family:'x
;color:red;';">test</div>
<div style="font-family:'x';color:red;';">test</div>

Fuzz results

Firefox logo
Firefox 124.0 Unknown Unknown

Updated

Sat Apr 06 2024
Found 4 results
Loading...
Safari logo
Safari 17.4 Unknown Unknown

Updated

Sat Apr 06 2024
Found 4 results
Loading...
Chrome logo
Chrome 124.0.0.0 Unknown Unknown

Updated

Fri Apr 19 2024
Found 4 results
Loading...