All VectorsVector nameUser Created Type Likes⚠ Browser differences 65.4k 65.4k 65.4k 54kCharacters allowed as a tag name using DOM APIshackvertor6/13/2025JS0 5 5 5 5Characters allowed as a class separatorhackvertor4/13/2024XSS0 25 25 25 25Characters allowed after throw statementhackvertor7/14/2025JS0 29 29 29 29Characters allowed after the void operatorhackvertor4/30/2024JS0⚠ Browser differences 48 48 48 32Characters allowed after slashes which result in an external URL hackvertor1/16/2025XSS0 26 26 26 26Characters allowed after parentheseshackvertor4/1/2024JS0 25 25 25 25Characters allowed after optional chaininghackvertor5/4/2024JS2 31 31 31 31Characters allowed after malformed entitieshackvertor7/1/2024XSS1⚠ Browser differences 80 80 80 64Characters allowed after hostname but don't change the hostnameThomasOrlita4/15/2024JS2 31 31 31 31Characters allowed after greater than in eventshackvertor6/21/2024XSS0 30 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 2 2 2 2Characters allowed after colon which result in an external URLhackvertor1/16/2025XSS0 25 25 25 25Characters allowed after a biginthackvertor7/18/2025JS0 1 1 1 1Characters allowed after * in CSS commentshackvertor3/31/2024HTML0 16 16 16 16Characters after stringshackvertor4/3/2024JS0⚠ Browser differences 12.7k 12.7k 12.7k 12.7kCharacters after https URI scheme which prevent URL parsing of hrefCillian-Collins10/27/2025XSS1 7 7 7 7Characters Supported in </script> Tagsghannu0x012/10/2026XSS0 46 46 46Characters Allowed Between Protocol // and localhost Where Host Still Equals localhostrootd4ddy3/2/2025JS0 1 1 1 1Character that closes HTML tagInsertScript4/2/2024HTML0 5 5 5 5Character allowed after onerror eventInsertScript4/2/2024XSS0Found 253 recordsPage 12 of 13«45678910111213»
