Characters that close an @x prefix before @import

Checks which characters can be inserted into CSS style declarations before a @x prefix.

Shazzer Master

Created byhackvertor

Created Aug 6, 2026

Updated Aug 6, 2026

Unable to render tweet button

Detecting browser...

CategoryCSS Parsing

VisibilityPublic

TypeJS

CharsetUTF-8

Template used:

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint($[i])+'@import url(https://fuzz.shazzer.co.uk/$[rand]?$[i]);';0x0D
document.head.appendChild(style);

Sample payloads

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/p1p0a3yhb78?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/0w7oyqfdci4b?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/ay9g3l3135n?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/u0l81w142p?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/kir3v39hvzi?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/ty7ys2700uh?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/bydjazsitfa?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/rugrzm5kj2p?59);';0x0D
document.head.appendChild(style);

const style = document.createElement("style");0x0D
style.textContent = '@x'+String.fromCodePoint(59)+'@import url(https://fuzz.shazzer.co.uk/e2gmwidgnxo?59);';0x0D
document.head.appendChild(style);

Distributed Fuzzing

Characters that close an @x prefix before @import

Sample payloads

Fuzz results