Quotes

1

1

yes

Created on: Saturday, July 13, 2024 at 4:22:53 PM

Updated on: Tuesday, May 27, 2025 at 8:15:32 AM

Category: HTML Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

<img src="$[chr]<iframe><!--">

if (document.querySelector('iframe')) {0x0D
    log(String.fromCharCode($[i]))0x0D
}