XSS. (No, the _other_ "S")
summary
Claims that CSS alone can exfiltrate CSRF tokens via background-image loads, using attribute selectors and pseudo-elements with content:attr() to pull fields into the rendered DOM, and that a proof‑of‑concept reads session IDs in Firefox (works but is browser‑limited). Techniques include Moz-document regexes, timing/animation and scrollbar tricks, and custom @font-face dictionary font of ~100,000 entries <1MB to speed brute‑force; defenses focus on Content Security Policy and externalizing inline style.
AI-written summary · about
chapters (11)
- 0:00Start
- 1:43Content Injection
- 3:08Why Is Content Ejection Important
- 5:15Timing Attacks
- 6:07Content Injection Attacks
- 6:48Advantage for the Attacker
- 7:18Defacement Phishing
- 9:05Csrf Token
- 24:57The Sirens
- 25:38Content Security Policy
- 28:05Inline Script
