PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Inline Style Exfiltration: leaking data with chained CSS conditionals

portswigger.net | research | #chromium | #exfiltration | #css | #css-injection | #inline-styles | #data-theft
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Chained CSS if() conditionals in inline styles exfiltrate attribute data such as usernames via background requests — no selectors or stylesheet imports needed; Burp actions brute-force values.
Published
Collected

Related coverage

research · portswigger.net
Blind CSS Exfiltration: exfiltrate unknown web pages
Blind CSS exfiltration extracts unknown page content when JavaScript is blocked by CSP or DOMPurify, chaining the :has selector and CSS variables into conditional requests that leak data.
research · portswigger.net
CSS:the bomb inside your inbox
PortSwigger breaks webmail CSS sanitizers to cross trust boundaries, exfiltrate tokens, control AI browsers by email and steal passwords, with attacks spanning Yahoo, Fastmail, ProtonMail and Gmail.
research · portswigger.net
Stealing HttpOnly cookies with the cookie sandwich technique
The cookie sandwich technique wraps a session cookie between quoted values and legacy $Version attributes, making Tomcat misparse the header and expose HttpOnly cookies to scripts.
research · portswigger.net
Redefining Impossible: XSS without arbitrary JavaScript
Solving an 'impossible' XSS lab: with the payload confined to a single-quoted string and a tiny charset, Luan Herrera exfiltrates the cookie via side-channel techniques, not arbitrary JavaScript.
research · portswigger.net
uBlock, I exfiltrate: exploiting ad blockers with CSS
CSS injection flaws in uBlock Origin's filter rules let crafted filters extract page data and steal Edge passwords; all issues were patched, with compromised filter lists the plausible vector.
research · portswigger.net
Creating a 3D world in pure CSS
A tutorial on building a first-person browsable 3D world with pure CSS and no JavaScript: 3D object placement, perspective and transforms, plus rudimentary keyboard and mouse interactivity.
Back