Shazzer logo

Characters allowed in middle of HTML tag name

Chrome logo 65.5k
Firefox logo 65.5k
Edge logo 65.5k
Safari logo 65.5k

Characters that are may be part of HTML tag names. These are less strict that the first character

JorianWoltjer
Created byJorianWoltjer
Created Jan 30, 2026
Updated Jan 30, 2026

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<a$[chr] id="test">
Code used after fuzz:
document.getElementById('test').tagName.length > 1 && log(i)

Sample payloads

<a0x0B id="test">

Fuzz results

Chrome logo
Chrome 145.0.0.0 desktop macOS 10.15.7
Updated8 Feb 2026
Found 65529 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop Linux Unknownolder version
Updated17 Feb 2026
Found 65529 results
Loading...
Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0older version
Updated8 Feb 2026
Found 65529 results
Loading...
Chrome logo
Chrome 142.0.0.0 mobile Android 10older version
Updated2 Feb 2026
Found 65529 results
Loading...
Firefox logo
Firefox 148.0 desktop macOS 10.15
Updated2 Feb 2026
Found 65529 results
Loading...
Firefox logo
Firefox 147.0 mobile Android 16older version
Updated31 Jan 2026
Found 65529 results
Loading...
Firefox logo
Firefox 147.0 desktop Windows NT 10.0older version
Updated30 Jan 2026
Found 65529 results
Loading...
Edge logo
Microsoft Edge 145.0.0.0 desktop Windows NT 10.0
Updated16 Feb 2026
Found 65529 results
Loading...
Safari logo
Safari 26.3 mobile iOS 18.7
Updated30 Jan 2026
Found 65529 results
Loading...