HTML elements that parse differently when rendered
34
34
35
This shows which elements change in the DOM when nested.
Created by: hackvertor
Created on: Friday, April 19, 2024 at 11:30:14 AM
Updated on: Wednesday, September 18, 2024 at 5:08:45 PM
Vector type: XSS
Template used:
<$[data1] id=x><$[data1]></$[data1]></$[data1]>
Code used after fuzz:
const element = document.getElementById('x');
if(element && !element.querySelector('$[data1]')) {
log('$[data1]');
}
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<a id=x><a></a></a>
<area id=x><area></area></area>
<base id=x><base></base></base>
<br id=x><br></br></br>
<dd id=x><dd></dd></dd>
<dt id=x><dt></dt></dt>
<embed id=x><embed></embed></embed>
<form id=x><form></form></form>
<h1 id=x><h1></h1></h1>
<hr id=x><hr></hr></hr>
<iframe id=x><iframe></iframe></iframe>
<img id=x><img></img></img>
<input id=x><input></input></input>
<li id=x><li></li></li>
<link id=x><link></link></link>
<meta id=x><meta></meta></meta>
<nobr id=x><nobr></nobr></nobr>
<noembed id=x><noembed></noembed></noembed>
<noframes id=x><noframes></noframes></noframes>
<noscript id=x><noscript></noscript></noscript>
Fuzz results
Safari 17.4.1 Unknown Unknown
Updated
Sat Apr 20 2024
Found 34 results
Data |
---|
a |
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
dd |
Data |
---|
dt |
Data |
---|
embed |
Data |
---|
form |
Data |
---|
h1 |
Data |
---|
hr |
Data |
---|
iframe |
Data |
---|
img |
Data |
---|
input |
Data |
---|
li |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
nobr |
Data |
---|
noembed |
Data |
---|
noframes |
Data |
---|
noscript |
Data |
---|
option |
Data |
---|
p |
Data |
---|
param |
Data |
---|
script |
Data |
---|
select |
Data |
---|
source |
Data |
---|
style |
Data |
---|
table |
Data |
---|
template |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Data |
---|
xmp |
Chrome 124.0.0.0 Unknown Unknown
Updated
Wed May 01 2024
Found 34 results
Data |
---|
a |
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
dd |
Data |
---|
dt |
Data |
---|
embed |
Data |
---|
form |
Data |
---|
h1 |
Data |
---|
hr |
Data |
---|
iframe |
Data |
---|
img |
Data |
---|
input |
Data |
---|
li |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
nobr |
Data |
---|
noembed |
Data |
---|
noframes |
Data |
---|
noscript |
Data |
---|
option |
Data |
---|
p |
Data |
---|
param |
Data |
---|
script |
Data |
---|
select |
Data |
---|
source |
Data |
---|
style |
Data |
---|
table |
Data |
---|
template |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Data |
---|
xmp |
Firefox 125.0 Unknown Unknown
Updated
Wed May 01 2024
Found 35 results
Data |
---|
a |
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
button |
Data |
---|
dd |
Data |
---|
dt |
Data |
---|
embed |
Data |
---|
form |
Data |
---|
h1 |
Data |
---|
hr |
Data |
---|
iframe |
Data |
---|
img |
Data |
---|
input |
Data |
---|
li |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
nobr |
Data |
---|
noembed |
Data |
---|
noframes |
Data |
---|
noscript |
Data |
---|
option |
Data |
---|
p |
Data |
---|
param |
Data |
---|
script |
Data |
---|
select |
Data |
---|
source |
Data |
---|
style |
Data |
---|
table |
Data |
---|
template |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Data |
---|
xmp |
Safari 17.5 mobile iOS 17.5.1
Updated
Wed Jun 05 2024
Found 34 results
Data |
---|
a |
Data |
---|
area |
Data |
---|
base |
Data |
---|
br |
Data |
---|
dd |
Data |
---|
dt |
Data |
---|
embed |
Data |
---|
form |
Data |
---|
h1 |
Data |
---|
hr |
Data |
---|
iframe |
Data |
---|
img |
Data |
---|
input |
Data |
---|
li |
Data |
---|
link |
Data |
---|
meta |
Data |
---|
nobr |
Data |
---|
noembed |
Data |
---|
noframes |
Data |
---|
noscript |
Data |
---|
option |
Data |
---|
p |
Data |
---|
param |
Data |
---|
script |
Data |
---|
select |
Data |
---|
source |
Data |
---|
style |
Data |
---|
table |
Data |
---|
template |
Data |
---|
textarea |
Data |
---|
title |
Data |
---|
track |
Data |
---|
wbr |
Data |
---|
xmp |