Attribute Separators

Characters that can be used in between HTML attributes.

By
skeptic_fx 1 Seen 850 times
Tags
attributes xss html characters
Run this test now.

Results


Tested on
Chrome - 80 - undefined
Fuzz data
47

Tested on
Googlebot - 2.1 - undefined
Fuzz data
47

This browser ran the most recent scan
Tested on
Chrome Mobile - 89 - Android
Fuzz data
47

User Script (FUZZER) 

					

<!-- ***DS_ATTRIBUTES*** refers to the array exposed in the Fuzz Data section -->

<img***DS_ATTRIBUTES***src=xx:xx onerror=addResult("***DS_ATTRIBUTES***".charCodeAt(0))>

Fuzz Data (FUZZER) 

					
var i, range=[];
for(i=0; i<255; i++)
  range.push(i);

var DS_ATTRIBUTES = range.map(function(x){ return String.fromCharCode(x);});