Characters allowed between an object and bracket notation
List of characters allowed between an object and the first bracket notation.
Created bycold-try
Created Apr 15, 2024
Updated May 23, 2025
Detecting browser...
CategoryXSS Execution
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
document$[chr]['location'];log($[i])Sample payloads
document⟦09⟧['location'];alert(9)document
['location'];alert(10)document0x0B['location'];alert(11)document0x0C['location'];alert(12)document0x0D['location'];alert(13)document ['location'];alert(32)document%['location'];alert(37)document&['location'];alert(38)document*['location'];alert(42)document+['location'];alert(43)document,['location'];alert(44)document-['location'];alert(45)document/['location'];alert(47)document:['location'];alert(58)document;['location'];alert(59)document<['location'];alert(60)document=['location'];alert(61)document>['location'];alert(62)document^['location'];alert(94)document|['location'];alert(124)Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Mon Jan 26 2026
Found 39 results
Loading...
Chrome 123.0.0.0 Unknown Unknownolder version
Updated
Mon Apr 15 2024
Found 39 results
Loading...
Firefox 147.0 desktop Linux
Updated
Sun Feb 01 2026
Found 39 results
Loading...
Firefox 124.0 Unknown Unknownolder version
Updated
Mon Apr 15 2024
Found 39 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 39 results
Loading...
Safari 15.5 Unknown Unknown
Updated
Mon Apr 15 2024
Found 39 results
Loading...