Get the latest tech news

CSS: The bomb inside your inbox


Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of bomb

bomb

Photo of inbox

inbox

Photo of css

css

Related news:

News photo

I resurrected an 8-year-old dead CSS library and gave it an engine

News photo

Show HN: Make senders work to get into your inbox

News photo

Experimenting with Random() in CSS