characters allowed between exclamation mark and greater then

Testing characters that still close a HTML comment

Bug Hunter

Created Jun 18, 2024

Updated May 28, 2025

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeHTML

CharsetUTF-8

Template used:

<!----!$[chr]><found>

Sample payloads

<!----!0x00><img/src/onerror=alert(1)>

<!----!>><img/src/onerror=alert(1)>