Characters allowed as a class separator

This shows what characters can separate classes in HTML.

Shazzer Elite

Created Apr 13, 2024

Updated May 14, 2025

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<div class="$[chr]x$[chr]"></div>

Code used after fuzz:

if(document.querySelector('.x'))log($[i]);

Sample payloads

<div class="0x09x0x09"></div>

<div class="
x
"></div>

<div class="0x0Cx0x0C"></div>

<div class="0x0Dx0x0D"></div>

<div class=" x "></div>