Tags that HTML encode it's contents
This enumerates through all HTML tags and checks if the span gets HTML encoded.
Created by: hackvertor
Created on: Tuesday, July 16, 2024 at 7:49:10 PM
Updated on: Saturday, August 31, 2024 at 3:12:25 PM
Vector type: XSS
Template used:
<$[data1] id=x><span></span></$[data1]>
Code used after fuzz:
x.innerHTML.includes('<') && log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<textarea id=x><span></span></textarea>
<title id=x><span></span></title>
Fuzz results
![Chrome logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fchrome.png&w=64&q=75)
Chrome 126.0.0.0 desktop macOS 10.15.7
Found 2 results
Data |
---|
textarea |
Data |
---|
title |
![Firefox logo](/_next/image?url=%2Flogos%2Fbrowsers%2Ffirefox.png&w=64&q=75)
Firefox 128.0 desktop macOS 10.15
Found 2 results
Data |
---|
textarea |
Data |
---|
title |
![Safari logo](/_next/image?url=%2Flogos%2Fbrowsers%2Fsafari.png&w=64&q=75)
Safari 17.4 desktop macOS 10.15.7
Found 2 results
Data |
---|
textarea |
Data |
---|
title |