List of HTML elements that convert to arbitrary string
![Firefox logo](/_next/image?url=%2Flogos%2Fbrowsers%2Ffirefox.png&w=64&q=75)
![Safari logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fsafari.png&w=64&q=75)
![Chrome logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fchrome.png&w=64&q=75)
When an element is used as a string it is converted using toString. Most elements convert to something like [object HTMLDivElement] but some dont
Created by: joaxcar
Created on: Wednesday, April 10, 2024 at 12:48:20 PM
Updated on: Thursday, January 30, 2025 at 2:46:46 PM
Vector type: XSS
Vector charset: UTF-8
Template used:
<$[data1] id="x"></$[data1]>
Code used after fuzz:
x.toString().startsWith('[') || log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<a id="x"></a>
<area id="x"></area>
Fuzz results
![Firefox logo](/_next/image?url=%2Flogos%2Fbrowsers%2Ffirefox.png&w=64&q=75)
Firefox 124.0 Unknown Unknown
Updated
Wed Apr 10 2024
Found 2 results
Loading...
![Safari logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fsafari.png&w=64&q=75)
Safari 16.4 Unknown Unknown
Updated
Wed Apr 10 2024
Found 2 results
Loading...
![Chrome logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fchrome.png&w=64&q=75)
Chrome 123.0.0.0 Unknown Unknown
Updated
Thu Apr 11 2024
Found 2 results
Loading...