Defending Against CSS-Based Attacks: Best Practices for Web Security

Most of us think of CSS as harmless. It paints the page. It can’t run code, it can’t read your keystrokes,