Shazzer logo

Characters allowed in middle of HTML tag name

Firefox logo 65.5k
Edge logo 65.5k
Chrome logo 65.5k

Characters that are may be part of HTML tag names. These are less strict that the first character

Created by: JorianWoltjer

Created on: Friday, January 30, 2026 at 12:50:42 PM

Updated on: Friday, January 30, 2026 at 12:50:42 PM


Category: HTML Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

Template used:
<a$[chr] id="test">
Code used after fuzz:
document.getElementById('test').tagName.length > 1 && log(i)
Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...

Sample payloads

<a0x0B id="test">

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0

Updated

Fri Jan 30 2026
Found 65529 results
Loading...
Firefox logo
Firefox 147.0 desktop Windows NT 10.0

Updated

Fri Jan 30 2026
Found 65529 results
Loading...
Edge logo
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0

Updated

Fri Jan 30 2026
Found 65529 results
Loading...