Entities that convert to greater than in a iframe srcdoc

3

3

3

This shows which entities convert to the greater than character inside a iframe srcdoc. Inspired by: https://x.com/therceman/status/1803666353892585642

Created on: Thursday, August 1, 2024 at 5:39:17 PM

Updated on: Thursday, April 10, 2025 at 2:12:01 PM

Vector type: XSS

Vector charset: UTF-8

Vector data 1: html_entities

<iframe srcdoc="$[data1]" id=x></iframe>

if(x.srcdoc.includes(">"))log('$[data1]')

Your browser was detected as:

Safari Unknown Unknown undefined undefined

We don't support this browser.