Shazzer logo

Characters that can be used in eval to write code in between

Chrome logo 24
Firefox logo 24
Edge logo 24

I was asking myself which characters can be used in eval with single quotes that still allow code execution.

m-boll
Created bym-boll
Created May 12, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryJavaScript Syntax
VisibilityPublic
TypeJS
CharsetUTF-8
Template used:
eval('$[chr]log($[i])$[chr]')

Sample payloads

eval('0x09alert(9)0x09')
eval('0x0Balert(11)0x0B')
eval('0x0Calert(12)0x0C')
eval(' alert(32) ')
eval(';alert(59);')
eval(' alert(160) ')
eval(' alert(5760) ')
eval(' alert(8192) ')
eval(' alert(8193) ')
eval(' alert(8194) ')
eval(' alert(8195) ')
eval(' alert(8196) ')
eval(' alert(8197) ')
eval(' alert(8198) ')
eval(' alert(8199) ')
eval(' alert(8200) ')
eval(' alert(8201) ')
eval(' alert(8202) ')
eval('
alert(8232)
')
eval('
alert(8233)
')

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 24 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 24 results
Loading...
Firefox logo
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 24 results
Loading...
Firefox logo
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 24 results
Loading...
Firefox logo
Firefox 125.0 Unknown Unknownolder version
Updated12 May 2024
Found 24 results
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 24 results
Loading...