4 ms·
This is not vital to the point you’re making but XSS has nothing to do with CSS.
by agency 6y ago
This is not vital to the point you’re making but XSS has nothing to do with CSS.
- Liron 6y agoIn this case the XSS vector is the fact that CSS allows running JavaScript in some browsers [1], but still, a lot of systems that are supposed to be weak and domain-specific are discovered to be Turing-complete, e.g. Conway's Game of Life. [1] https://stackoverflow.com/questions/3607894/cross-site-scripting-in-css-stylesheets https://stackoverflow.com/questions/3607894/cross-site-scrip...