Characters that can break out of an inline style with double quotes

1

Characters that can break out of an inline style with double quotes

Created on: Saturday, July 13, 2024 at 7:33:48 PM

Updated on: Tuesday, May 27, 2025 at 8:15:32 AM

Category: CSS Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

<div id="test" style="$[chr]onload="alert(1)">hello</div>

let a = document.getElementById("test");0x0D
if (typeof a.onload === 'function') {0x0D
log(String.fromCharCode($[i]))0x0D
  }