Deserializing...

Characters allowed as a class separator

This shows what characters can separate classes in HTML.

Created byhackvertor

Created Apr 13, 2024

Updated May 14, 2025

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<div class="$[chr]x$[chr]"></div>

Code used after fuzz:

if(document.querySelector('.x'))log($[i]);

Sample payloads

<div class="0x09x0x09"></div>

<div class="
x
"></div>

<div class="0x0Cx0x0C"></div>

<div class="0x0Dx0x0D"></div>

<div class=" x "></div>