Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer
general Blog post

Inline Style Exfiltration: leaking data with chained CSS conditionals

Source: PortSwigger Research · Published · Last checked 3 hours ago ·
Inline Style Exfiltration: leaking data with chained CSS conditionals
Image: PortSwigger Research
Read original source ↗ (portswigger.net)

Publisher excerpt From PortSwigger Research

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c

Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.

Reference: PortSwigger Research — portswigger.net ↗

Related news