Characters allowed before @import

This vector shows which characters are allowed before an @import statement. It uses the new URL fuzzing functionality in Shazzer.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Sep 5, 2026

Unable to render tweet button

RSS

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

const style = document.createElement("style");
style.textContent = String.fromCodePoint($[i])+'@import url("https://fuzz.shazzer.co.uk/$[rand]?$[i]");';
document.head.appendChild(style);

Sample payloads

const style = document.createElement("style");
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/mudrl6yicor?9");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/sfyqglbnyqr?10");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/n08172j2mt?12");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/xttz9dmvqd8?13");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/w3z8o4ssqnm?32");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/ev85gbw9d4m?9");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/85v1hnnvamw?10");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/ol4vtqdi9eo?12");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/22ltkolpfxj?13");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/6e26e9gjxdy?32");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/gfmy2x9ddy7?9");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/jj33op7745o?10");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/s002o457b0i?12");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/7yh7n7u9r4f?13");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/g9fn2061heb?32");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/cigza6d5dof?9");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/6d8i336qbgv?10");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/bsmk49xtad?12");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/orw32b4329k?13");';
document.head.appendChild(style);

const style = document.createElement("style");
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/ix62d1pbt2?32");';
document.head.appendChild(style);

Distributed Fuzzing

Characters allowed before @import

Sample payloads

Fuzz results