Characters allowed before event in attribute name using setAttribute

This vector shows which characters are allowed before an event name when using setAttribute.

Shazzer Elite

Created Aug 21, 2024

Updated May 27, 2025

Unable to render tweet button

Detecting browser...

CategoryDOM Behavior

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

let img = document.createElement('img');0x0D
img.src = 'data:';0x0D
img.setAttribute('$[chr]onerror','log($[i])')0x0D
document.body.append(img);

Sample payloads

let img = document.createElement('img');0x0D
img.src = 'data:';0x0D
img.setAttribute('\onerror','alert(92)')0x0D
document.body.append(img);