Inline Style Exfiltration: leaking data with chained CSS conditionals
CYBERSECURITY FEATURED ANALYSIS

Inline Style Exfiltration: leaking data with chained CSS conditionals

SOURCE

PortSwigger Research

DATE

READ

1 min read

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c