Characters allowed to break double quotes

Characters allowed to break double quotes in the action attribute

Created by: p3n7a90n

Created on: 6/30/2024, 12:02:09 PM

Updated on: 7/2/2024, 7:37:37 AM

Vector type: XSS

<form id="test" action="aaa$[chr]onsubmit=alert(1)><input/type='submit'>

var form = document.getElementById("test");
if (typeof form.onsubmit === 'function') {
log(String.fromCharCode($[i]))
  }