Characters allowed before @import

This vector shows which characters are allowed before an @import statement. It uses the new URL fuzzing functionality in Shazzer.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Aug 6, 2026

Unable to render tweet button

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint($[i])+'@import url("https://fuzz.shazzer.co.uk/$[rand]?$[i]");';0x0D
document.head.appendChild(style);

Sample payloads

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/f51la7aqahc?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/aks88kofelm?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/cdnxc1xl59j?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/9kl35pyl8up?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/jpv757nuj19?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/8maok7dqnp?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/98hcl426xf6?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/6ivwejsnaoi?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/sizj3s1xfrq?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/ml0w9w5rgq?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/49av6chqo2z?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/75ce2rez6zp?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/45o5tepbrul?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/puia9onctc?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/r8wlaueyj6h?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(9)+'@import url("https://fuzz.shazzer.co.uk/ps2v5g5pbz?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(10)+'@import url("https://fuzz.shazzer.co.uk/02z2ftn9uga6?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(12)+'@import url("https://fuzz.shazzer.co.uk/z4xc8mata8?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(13)+'@import url("https://fuzz.shazzer.co.uk/05tbhr69wqth?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = String.fromCodePoint(32)+'@import url("https://fuzz.shazzer.co.uk/kqran3kvkk7?32");';0x0D
document.head.appendChild(style);

Distributed Fuzzing

Characters allowed before @import

Sample payloads

Fuzz results