Tags that remove the span or are self closing

Chrome logo 17
Safari logo 17
Firefox logo 17

This checks if a tag removes the span or doesn't contain it.

Created by: hackvertor

Created on: Tuesday, July 16, 2024 at 8:00:42 PM

Updated on: Wednesday, September 18, 2024 at 2:38:49 PM

Vector type: XSS

Template used:
<$[data1] id=x><span></span></$[data1]>
Code used after fuzz:
!x.innerHTML.includes('<span>')  && log('$[data1]')
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<area id=x><span></span></area>
<base id=x><span></span></base>
<br id=x><span></span></br>
<embed id=x><span></span></embed>
<hr id=x><span></span></hr>
<img id=x><span></span></img>
<input id=x><span></span></input>
<link id=x><span></span></link>
<meta id=x><span></span></meta>
<param id=x><span></span></param>
<select id=x><span></span></select>
<source id=x><span></span></source>
<table id=x><span></span></table>
<textarea id=x><span></span></textarea>
<title id=x><span></span></title>
<track id=x><span></span></track>
<wbr id=x><span></span></wbr>

Fuzz results

Chrome logo
Chrome 126.0.0.0 desktop macOS 10.15.7

Updated

Tue Jul 16 2024
Found 17 results
Data
area
Data
base
Data
br
Data
embed
Data
hr
Data
img
Data
input
Data
link
Data
meta
Data
param
Data
select
Data
source
Data
table
Data
textarea
Data
title
Data
track
Data
wbr
Safari logo
Safari 17.4 desktop macOS 10.15.7

Updated

Tue Jul 16 2024
Found 17 results
Data
area
Data
base
Data
br
Data
embed
Data
hr
Data
img
Data
input
Data
link
Data
meta
Data
param
Data
select
Data
source
Data
table
Data
textarea
Data
title
Data
track
Data
wbr
Firefox logo
Firefox 128.0 desktop macOS 10.15

Updated

Tue Jul 16 2024
Found 17 results
Data
area
Data
base
Data
br
Data
embed
Data
hr
Data
img
Data
input
Data
link
Data
meta
Data
param
Data
select
Data
source
Data
table
Data
textarea
Data
title
Data
track
Data
wbr