Skip to content
uBlock, I exfiltrate: exploiting ad blockers with CSS
portswigger.net | research | #web-security | #css-injection | #ublock-origin | #ad-blockers | #filter-lists | #password-theft
Summary
CSS injection flaws in uBlock Origin's filter rules let crafted filters extract page data and steal Edge passwords; all issues were patched, with compromised filter lists the plausible vector.
- Published
- Collected