Skip to content
securitytabs

Inline Style Exfiltration: leaking data with chained CSS conditionals

PortSwigger Research

I discovered how to use CSS to steal attribute data without selectors and stylesheet imports! This means you can now exploit CSS injection via style attributes! Learn how below: Someone asked if you c

Summary from PortSwigger Research.

Explained

The technology and terms in this story. Learn more