3 ms·
I don’t understand this attack: if attacker can control CSS on the page - then they probably can also control javascript. Which means they can extract any data
by heavenlyblue 7y ago
I don’t understand this attack: if attacker can control CSS on the page - then they probably can also control javascript. Which means they can extract any data from it.
- britch 7y agoI think the point was even if you disable JS in your browser to be "safe," there's the possibility of some nasty CSS on the page as well. Turning off JS does not make you safe.