Entities allowed inside function name

This vector uses Shazzer's new features to check which entities are allowed inside a function name using images. The results are a bit inconsistent yet because I currently wait for page load.

Shazzer Master

Created byhackvertor

The fuzzing network isn't running this vector

Matched nothing in 2 engines (Blink, Gecko) and has never produced a result. Editing the template, init or after code, type, charset or data references puts it back on the network.

Created Jul 2, 2024

Updated Aug 13, 2026

Unable to render tweet button

Detecting browser...

CategoryEntity Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholderhtml_entities

Template used:

<img src=data: onerror="lo$[data1]g('html($[data1])')">

Distributed Fuzzing

Entities allowed inside function name

Fuzz results