Characters that cause the backslash to be consumed with GBK charset

This vector demonstrates that certain characters consume backslashes when using a GBK charset

Shazzer Master

Created Nov 7, 2024

Updated Jul 24, 2026

Unable to render tweet button

Detecting browser...

CategoryCharacter Encoding

VisibilityPublic

TypeXSS

CharsetGBK

Template used:

<script>"$[chr]\"-log($[i])//"</script>

Sample payloads

<script>"\\"-alert(92)//"</script>