Characters that act as hash in anchors

This uses the pathname property to detect if the character is a hash

Shazzer Master

Created Jun 16, 2026

Updated Jun 16, 2026

Unable to render tweet button

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<a href="https://example.com$[chr]foo" id=x></a>

Code used after fuzz:

document.getElementById('x').hash.includes('foo') && log($[i])

Sample payloads

<a href="https://example.com#foo" id=x></a>