> Following up on this, I found an article[0] claiming that it isn't really an issue since a pure CSS keylogger can only catch one character. That reminds me o

> Following up on this, I found an article[0] claiming that it isn't really an issue since a pure CSS keylogger can only catch one character. That reminds me of: • Stealing Data With CSS: Attack and Defense https://www.mike-gualtieri.com/posts/stealing-data-with-css-attack-and-defense https://www.mike-gualtieri.com/posts/stealing-data-with-css-... • CSS Exfil Vulnerability Tester https://www.mike-gualtieri.com/css-exfil-vulnerability-tester https://www.mike-gualtieri.com/css-exfil-vulnerability-teste... • CSS Exfil Protection (Firefox) https://addons.mozilla.org/en-US/firefox/addon/css-exfil-protection/ https://addons.mozilla.org/en-US/firefox/addon/css-exfil-pro... • CSS Exfil Protection (Chrome) https://chrome.google.com/webstore/detail/css-exfil-protection/ibeemfhcbbikonfajhamlkdgedmekifo https://chrome.google.com/webstore/detail/css-exfil-protecti... Never really got much coverage. It's not mitigated by uBlock or uMatrix (unless you deny all CSS).