Shazzer logo

Characters allowed between an object and bracket notation

Chrome logo 39
Firefox logo 39
Edge logo 39
Safari logo 39

List of characters allowed between an object and the first bracket notation.

cold-try
Created bycold-try
Created Apr 15, 2024
Updated May 23, 2025

Tweet
Detecting browser...
CategoryXSS Execution
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
document$[chr]['location'];log($[i])

Sample payloads

document09['location'];alert(9)
document
['location'];alert(10)
document0x0B['location'];alert(11)
document0x0C['location'];alert(12)
document0x0D['location'];alert(13)
document ['location'];alert(32)
document%['location'];alert(37)
document&['location'];alert(38)
document*['location'];alert(42)
document+['location'];alert(43)
document,['location'];alert(44)
document-['location'];alert(45)
document/['location'];alert(47)
document:['location'];alert(58)
document;['location'];alert(59)
document<['location'];alert(60)
document=['location'];alert(61)
document>['location'];alert(62)
document^['location'];alert(94)
document|['location'];alert(124)

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Mon Jan 26 2026
Found 39 results
Loading...
Chrome logo
Chrome 123.0.0.0 Unknown Unknownolder version

Updated

Mon Apr 15 2024
Found 39 results
Loading...
Firefox logo
Firefox 147.0 desktop Linux

Updated

Sun Feb 01 2026
Found 39 results
Loading...
Firefox logo
Firefox 124.0 Unknown Unknownolder version

Updated

Mon Apr 15 2024
Found 39 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 39 results
Loading...
Safari logo
Safari 15.5 Unknown Unknown

Updated

Mon Apr 15 2024
Found 39 results
Loading...