Defending Against CSS-Based Attacks: Best Practices for Web Security
Most of us think of CSS as harmless. It paints the page. It can’t run code, it can’t read your keystrokes,
CSS security
Understanding CSS Side-Channel Attacks: Mechanisms, Risks, and Prevention
You escaped every bit of user input in your HTML. You locked down your script sources. Then someone pastes a few