Polyglotting...

HTML tagName differences

Finds which characters get transformed in tagName

Shazzer Master

Created byhackvertor

Created Aug 25, 2026

Updated Aug 25, 2026

Unable to render tweet button

Detecting browser...

CategoryHTML Parsing

VisibilityPublic

TypeXSS

CharsetUTF-8

Template used:

<x$[chr] id=x>

Code used after fuzz:

let localName = x.tagName;0x0D
let compareTag = "X" + String.fromCodePoint($[i]);0x0D
localName !== compareTag && log($[i])

Sample payloads

<x0x00 id=x>

<x0x09 id=x>

<x
 id=x>

<x0x0C id=x>

<x0x0D id=x>

<x  id=x>

<x/ id=x>

<xa id=x>

<xb id=x>

<xc id=x>

<xd id=x>

<xe id=x>

<xf id=x>

<xg id=x>

<xh id=x>

<xi id=x>

<xj id=x>

<xk id=x>

<xl id=x>

<xm id=x>