Characters that act as question mark in anchors

This uses the query property to detect if the character is a question mark

Shazzer Master

Created Jun 16, 2026

Updated Jun 16, 2026

Unable to render tweet button

Detecting browser...

CategoryURL Handling

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<a href="https://example.com$[chr]foo" id=x></a>

Code used after fuzz:

document.getElementById('x').search.includes('foo') && log($[i])

Sample payloads

<a href="https://example.com?foo" id=x></a>