Tags that HTML encode it's contents

This enumerates through all HTML tags and checks if the span gets HTML encoded.

Shazzer Master

Created Jul 16, 2024

Updated May 27, 2025

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholderhtml

Template used:

<$[data1] id=x><span></span></$[data1]>

Code used after fuzz:

x.innerHTML.includes('&lt;')  && log('$[data1]')

Sample payloads

<textarea id=x><span></span></textarea>

<title id=x><span></span></title>