All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Executing...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
Supported HTML and events by the Sanitizer
hackvertor
7/8/2026
JS
0
1
1
1
1
JavaScript URLs allowed by the Sanitizer
hackvertor
7/8/2026
JS
0
1.1M
1.1M
1.1M
1.1M
Characters allowed as CSS variable names
hackvertor
8/6/2026
XSS
0
5
5
5
5
Characters allowed after !
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
66
1
66
1
Invalid selector characters
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
51
1
51
1
Invalid selector characters with a prefix of x
hackvertor
8/6/2026
XSS
0
5
5
5
5
Characters allowed before @import
hackvertor
8/6/2026
JS
0
5
5
5
5
Characters allowed before url function with @import
hackvertor
8/6/2026
JS
0
⚠ Browser differences
6
6
6
8
SVG elements & attributes that make external requests
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
6
7
6
6
Characters before CSS property names
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
19
11
19
14
CSS Properties that make external requests
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
43
33
43
42
CSS Properties and functions that make external requests
hackvertor
8/6/2026
XSS
0
1
1
1
1
Characters allowed before image-set function
hackvertor
8/6/2026
XSS
0
1
1
1
1
Characters that close an @x prefix before @import
hackvertor
8/6/2026
JS
0
⚠ Browser differences
1
5
5
5
Characters that close an @x with curlies prefix before @import
hackvertor
8/6/2026
JS
0
⚠ Browser differences
2
1
2
2
CSS escapes that cause an external request with a forward slash
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
5
4
5
5
CSS hex escapes that cause an external request in-between forward slashes
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
11
10
11
11
Escaped characters that cause an external request in-between forward slashes
hackvertor
8/6/2026
XSS
0
6
6
6
6
CSS class name separators
hackvertor
8/6/2026
XSS
0
6
6
6
6
Characters before a CSS background url function
hackvertor
8/6/2026
XSS
0
Found
314
records
Page 15 of 16
«
7
8
9
10
11
12
13
14
15
16
»