I assume it's a script that searches the CSS files for any JS and runs eval()? Yeah, the problem isn't CSS, them problem is whoever thought that was a good ide

I assume it's a script that searches the CSS files for any JS and runs eval()? Yeah, the problem isn't CSS, them problem is whoever thought that was a good idea. Now XSS is a "feature" of CSS.