List of HTML elements that convert to arbitrary string

Firefox logo 2
Safari logo 2
Chrome logo 2

When an element is used as a string it is converted using toString. Most elements convert to something like [object HTMLDivElement] but some dont

Created by: joaxcar

Created on: Wednesday, April 10, 2024 at 12:48:20 PM

Updated on: Thursday, November 21, 2024 at 7:38:18 AM

Vector type: XSS

Vector charset: UTF-8

Template used:
<$[data1] id="x"></$[data1]>
Code used after fuzz:
x.toString().startsWith('[') || log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a id="x"></a>
<area id="x"></area>

Fuzz results

Firefox logo
Firefox 124.0 Unknown Unknown

Updated

Wed Apr 10 2024
Found 2 results
Loading...
Safari logo
Safari 16.4 Unknown Unknown

Updated

Wed Apr 10 2024
Found 2 results
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknown

Updated

Thu Apr 11 2024
Found 2 results
Loading...