Log in on each browser you use and one press of Fuzz or Test fuzz runs the vector in all of them, with every browser's results side by side.
Characters allowed in between start of HTML tag name and event handler
Unable to render tweet button
<a$[chr]id="test">
document.getElementById('test') && log(i)
<a0x09id="test">
<a id="test">
<a0x0Cid="test">
<a/id="test">
6
6
6
6