3.14 Things You Didn't Know About CSS (Updated)
summary
Shows concrete tricks and risks: demos that actually run—CSS expressions executing JS in old IE, a proof‑of‑concept that leaks attributes by brute‑force CSS exfiltration, and Masado Kinugawa’s font‑per‑character trick that requests one URL per character. Presents a working 12 stylable blocks demo that recreates UI from empty HTML, tools to escape odd IDs, and numbers (over 200 CSS‑Garden themes) and compatibility details that determine whether each trick works.
AI-written summary · about
chapters (18)
- 0:00Intro
- 4:09Font family names in CSS
- 7:07Unquoted attribute values
- 8:37CSS comments
- 11:51Valid HTML
- 15:23CSS without HTML
- 17:34Classes and IDs in HTML
- 19:22Escaping CSS selectors
- 23:42Injection contexts
- 29:38Leaking an attribute value
- 30:43Stealing data from the DOM
- 31:12Leaking unique symbols from a text node
- 34:11IE's legacy document modes
- 34:55CSS Expressions in IE s 10
- 36:24How to avoid CSS expression vulnerabilities?
- 38:08Freezing Firefox
- 39:33What band is this?
- 40:33What song is this?
