Tags that HTML encode it's contents

2

2

2

This enumerates through all HTML tags and checks if the span gets HTML encoded.

Created on: Tuesday, July 16, 2024 at 7:49:10 PM

Updated on: Tuesday, April 1, 2025 at 7:27:52 AM

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html

<$[data1] id=x><span></span></$[data1]>

x.innerHTML.includes('<')  && log('$[data1]')