Characters allowed in middle of HTML tag name
Characters that are may be part of HTML tag names. These are less strict that the first character
Created by: JorianWoltjer
Created on: Friday, January 30, 2026 at 12:50:42 PM
Updated on: Friday, January 30, 2026 at 12:50:42 PM
Category: HTML Parsing
Vector visibility: Public
Vector type: XSS
Vector charset: UTF-8
Template used:
<a$[chr] id="test">Code used after fuzz:
document.getElementById('test').tagName.length > 1 && log(i)Your browser was detected as:
Detecting... Detecting... Detecting... Detecting...
Sample payloads
<a0x0B id="test">Fuzz results
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated
Fri Jan 30 2026
Found 65529 results
Loading...
Firefox 147.0 desktop Windows NT 10.0
Updated
Fri Jan 30 2026
Found 65529 results
Loading...
Microsoft Edge 144.0.0.0 desktop Windows NT 10.0
Updated
Fri Jan 30 2026
Found 65529 results
Loading...