All VectorsVector nameUser Created Type Likes⚠ Browser differences 1 1 1 10Entities that are normalized for ehackvertor7/12/2024JS0 1 1 1Quotesdogspyagent7/13/2024XSS0 13 13 13 13Properties are accessible in a sandboxed iframehackvertor6/7/2024JS0 1 1 1HTML-Encoded Attribute EscapeIDKdir7/13/2024XSS0 29 29 29 29Characters allowed after the void operatorhackvertor4/30/2024JS0 1 1 1Characters that can break out of an inline style with double quotes0xdef1ant7/13/2024XSS0 6 6 6 6Characters allowed between HTML attributes0x999-x4/10/2024XSS0⚠ Browser differences 20 20 20 10Attributes that are also DOM propertieshackvertor4/30/2024XSS0 1 1 1Characters that can break out of an inline style with single quotes0xdef1ant7/13/2024XSS0 25 25 25 25Characters ignored in strings when doing a non strict comparisonhackvertor6/18/2024JS0 14 14 14Active formatting elementsJorianWoltjer5/1/2024XSS0 1.1k 1.1k 1.1kMutated XSS AttributesIDKdir7/13/2024XSS0 1 1 1HostIDKdir7/15/2024JS0 5 5 5 5Character allowed after onerror eventInsertScript4/2/2024XSS0 4 4 4 4Break out of CSS stringshackvertor4/4/2024HTML0 8 8 8Characters that expand upon toUpperCase() DreyAnd4/10/2024JS0 32 32 32Characters that can precede the javascript protocol copyrcbarnett5/2/2024XSS0⚠ Browser differences 5 1 5 5Characters allowed before CSS selectorshackvertor7/15/2024XSS0 25 25 25 25Characters allowed before optional chaininghackvertor5/4/2024JS0 1 1 1React DOM srcIDKdir7/15/2024JS0Found 245 recordsPage 8 of 13«3456789101112»