List of HTML elements that convert to arbitrary string



When an element is used as a string it is converted using toString. Most elements convert to something like [object HTMLDivElement] but some dont
Created by: joaxcar
Created on: Wednesday, April 10, 2024 at 12:48:20 PM
Updated on: Monday, March 31, 2025 at 2:48:23 AM
Vector type: XSS
Vector charset: UTF-8
Vector data 1: html
Template used:
<$[data1] id="x"></$[data1]>
Code used after fuzz:
x.toString().startsWith('[') || log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<a id="x"></a>
<area id="x"></area>
Fuzz results

Firefox 124.0 Unknown Unknown
Updated
Wed Apr 10 2024
Found 2 results
Loading...

Safari 16.4 Unknown Unknown
Updated
Wed Apr 10 2024
Found 2 results
Loading...

Chrome 123.0.0.0 Unknown Unknown
Updated
Thu Apr 11 2024
Found 2 results
Loading...