Characters that close an @x prefix before @import

Checks which characters can be inserted into CSS style declarations before a @x prefix.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Aug 6, 2026

Unable to render tweet button

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint($[i])+'@import url(https://fuzz.shazzer.co.uk/$[rand]?$[i]);';0x0D
document.head.appendChild(style);

Sample payloads

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/g8jqkmn6wnb?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/9az7xilqr5d?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/p6efew0bq5c?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/05216hgky8ev?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/ywjtlez8jiq?59);';0x0D
document.head.appendChild(style);

Distributed Fuzzing

Characters that close an @x prefix before @import

Sample payloads

Fuzz results