In this case the XSS vector is the fact that CSS allows running JavaScript in some browsers [1], but still, a lot of systems that are supposed to be weak and do

In this case the XSS vector is the fact that CSS allows running JavaScript in some browsers [1], but still, a lot of systems that are supposed to be weak and domain-specific are discovered to be Turing-complete, e.g. Conway's Game of Life. [1] https://stackoverflow.com/questions/3607894/cross-site-scripting-in-css-stylesheets https://stackoverflow.com/questions/3607894/cross-site-scrip...