List of HTML elements that convert to arbitrary string

When an element is used as a string it is converted using toString. Most elements convert to something like [object HTMLDivElement] but some dont

Created byjoaxcar

Created Apr 10, 2024

Updated May 23, 2025

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholderhtml

Template used:

<$[data1] id="x"></$[data1]>

Code used after fuzz:

x.toString().startsWith('[') || log('$[data1]')

Sample payloads

<a id="x"></a>

<area id="x"></area>