HTML elements that parse differently when rendered

This shows which elements change in the DOM when nested.

Created by: hackvertor

Created on: Friday, April 19, 2024 at 11:30:14 AM

Updated on: Friday, July 19, 2024 at 9:04:01 AM

Vector type: XSS

Template used:
<$[data1] id=x><$[data1]></$[data1]></$[data1]>
Code used after fuzz:
const element = document.getElementById('x');
if(element && !element.querySelector('$[data1]')) {
   log('$[data1]');
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a id=x><a></a></a>
<area id=x><area></area></area>
<base id=x><base></base></base>
<br id=x><br></br></br>
<button id=x><button></button></button>
<dd id=x><dd></dd></dd>
<dt id=x><dt></dt></dt>
<embed id=x><embed></embed></embed>
<form id=x><form></form></form>
<h1 id=x><h1></h1></h1>
<hr id=x><hr></hr></hr>
<iframe id=x><iframe></iframe></iframe>
<img id=x><img></img></img>
<input id=x><input></input></input>
<li id=x><li></li></li>
<link id=x><link></link></link>
<meta id=x><meta></meta></meta>
<nobr id=x><nobr></nobr></nobr>
<noembed id=x><noembed></noembed></noembed>
<noframes id=x><noframes></noframes></noframes>

Fuzz results

Firefox logo
Firefox 125.0 Unknown Unknown
Found 35 results
Data
a
Data
area
Data
base
Data
br
Data
button
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp
Safari logo
Safari 17.4.1 Unknown Unknown
Found 34 results
Data
a
Data
area
Data
base
Data
br
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp
Chrome logo
Chrome 124.0.0.0 Unknown Unknown
Found 34 results
Data
a
Data
area
Data
base
Data
br
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp
Safari logo
Safari 17.5 mobile iOS 17.5.1
Found 34 results
Data
a
Data
area
Data
base
Data
br
Data
dd
Data
dt
Data
embed
Data
form
Data
h1
Data
hr
Data
iframe
Data
img
Data
input
Data
li
Data
link
Data
meta
Data
nobr
Data
noembed
Data
noframes
Data
noscript
Data
option
Data
p
Data
param
Data
script
Data
select
Data
source
Data
style
Data
table
Data
template
Data
textarea
Data
title
Data
track
Data
wbr
Data
xmp