Reproducing...

Characters allowed before url function with @import

This vector shows which characters are allowed before an URL function after the @import statement.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Aug 6, 2026

Unable to render tweet button

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint($[i])+'url("https://fuzz.shazzer.co.uk/$[rand]?$[i]");';0x0D
document.head.appendChild(style);

Sample payloads

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(9)+'url("https://fuzz.shazzer.co.uk/9kqpowkvv78?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(10)+'url("https://fuzz.shazzer.co.uk/51cnntnj5gu?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(12)+'url("https://fuzz.shazzer.co.uk/h8diaigsk6l?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(13)+'url("https://fuzz.shazzer.co.uk/65yibefha9p?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(32)+'url("https://fuzz.shazzer.co.uk/z53u69lruaq?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(9)+'url("https://fuzz.shazzer.co.uk/iwzyi1zea8a?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(10)+'url("https://fuzz.shazzer.co.uk/agkx3mi7i7?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(12)+'url("https://fuzz.shazzer.co.uk/cakbtwu3den?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(13)+'url("https://fuzz.shazzer.co.uk/oa8g15yhhu?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(32)+'url("https://fuzz.shazzer.co.uk/obbnjxlme4?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(9)+'url("https://fuzz.shazzer.co.uk/2tgzc8mlyx2?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(10)+'url("https://fuzz.shazzer.co.uk/gmkuis251t?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(12)+'url("https://fuzz.shazzer.co.uk/5orlkkbx35a?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(13)+'url("https://fuzz.shazzer.co.uk/i5on30dtae?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(32)+'url("https://fuzz.shazzer.co.uk/0kace1ivccwm?32");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(9)+'url("https://fuzz.shazzer.co.uk/h3ugzwzrzhe?9");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(10)+'url("https://fuzz.shazzer.co.uk/shmkqbvby3h?10");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(12)+'url("https://fuzz.shazzer.co.uk/8pbcajtiow3?12");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(13)+'url("https://fuzz.shazzer.co.uk/n06r1utqcgc?13");';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@import'+String.fromCodePoint(32)+'url("https://fuzz.shazzer.co.uk/yl9mxdm5o4?32");';0x0D
document.head.appendChild(style);