Need help with xss-cheatsheet-data?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

292 Stars 59 Forks Other 81 Commits 2 Opened issues


This repository contains all the XSS cheatsheet data to allow contributions from the community.

Services available


Need anything else?

Contributors list

This is the data that powers the PortSwigger XSS cheat sheet. We have put this data on Github so the community can contribute vectors via pull requests.


To contribute please create a pull request with changes to the JSON data.

For example, to add onwaiting to the data, do:

"onwaiting": {
        "description": "Fires when while waiting for the data",
        "tags": [
                "tag": "video",
                "code": "

The tags array contains the tags supported by the vector and browser support. Supported browsers are chrome,safari,firefox,edge all in lowercase. The interaction flag specifies if the vector requires user interaction.

Please make sure you search the data to ensure your vector hasn't already been added. Please include your Twitter handle in the pull request message if you would like to be credited with it.


The copyright for this project belongs to PortSwigger Web Security. We do not want this data to be used to create derivative cheat sheets hosted elsewhere, so we are not providing a license. That said, you are free to fork this repo in order to create pull requests back.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.