New answers tagged


Within a HTML5 <title> tag, it is not possible to inject new elements without allowing slashes. Since your browser's HTML parser is a state machine, you can simply follow the state transitions of the tokenizer (per the HTML syntax specification) and see how far you get. In your case, a <title> tag in the head section evokes the "generic RCDATA ...

Top 50 recent answers are included