3 ms·
Protecting Browsers from Cross-Origin HTML-parsed-as-CSS Attacks [pdf]
- js4all 16y agoInteresting article. Cookie-stealing however is not that simple, as all sites I know in detail, use IP binding. This method renders the cookie useless for the attacker, as long as he doesn't forge the original IP.