Tags that remove the span or are self closing

⚠ Browser differences

This checks if a tag removes the span or doesn't contain it.

Created by: hackvertor

Created on: Tuesday, July 16, 2024 at 8:00:42 PM

Updated on: Tuesday, May 27, 2025 at 8:15:19 AM

Detecting browser...

Category: HTML Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html

Template used:

<$[data1] id=x><span></span></$[data1]>

Code used after fuzz:

!x.innerHTML.includes('<span>')  && log('$[data1]')

Sample payloads

<area id=x><span></span></area>

<base id=x><span></span></base>

<br id=x><span></span></br>

<embed id=x><span></span></embed>

<hr id=x><span></span></hr>

<img id=x><span></span></img>

<input id=x><span></span></input>

<link id=x><span></span></link>

<meta id=x><span></span></meta>

<param id=x><span></span></param>

<source id=x><span></span></source>

<table id=x><span></span></table>

<textarea id=x><span></span></textarea>

<title id=x><span></span></title>

<track id=x><span></span></track>

<wbr id=x><span></span></wbr>

<select id=x><span></span></select>