Skip to content
Inline Style Exfiltration: leaking data with chained CSS conditionals
portswigger.net | research | #chromium | #exfiltration | #css | #css-injection | #inline-styles | #data-theft
Summary
Chained CSS if() conditionals in inline styles exfiltrate attribute data such as usernames via background requests — no selectors or stylesheet imports needed; Burp actions brute-force values.
- Published
- Collected