Understanding CSS Side-Channel Attacks: Mechanisms, Risks, and Prevention

You escaped every bit of user input in your HTML. You locked down your script sources. Then someone pastes a few