Shazzer logo

Characters allowed as a class separator

Chrome logo 5
Firefox logo 5
Edge logo 5
Safari logo 5

This shows what characters can separate classes in HTML.

hackvertor
Created byhackvertor
Created Apr 13, 2024
Updated May 14, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<div class="$[chr]x$[chr]"></div>
Code used after fuzz:
if(document.querySelector('.x'))log($[i]);

Sample payloads

<div class="0x09x0x09"></div>
<div class="
x
"></div>
<div class="0x0Cx0x0C"></div>
<div class="0x0Dx0x0D"></div>
<div class=" x "></div>

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 5 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated26 Jan 2026
Found 5 results
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknownolder version
Updated13 Apr 2024
Found 5 results
Loading...
Firefox logo
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 5 results
Loading...
Firefox logo
Firefox 124.0 Unknown Unknownolder version
Updated13 Apr 2024
Found 5 results
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 5 results
Loading...
Safari logo
Safari 17.4.1 Unknown Unknown
Updated13 Apr 2024
Found 5 results
Loading...