3 ms·
Are there security concerns related to enabling CSS?
by ez77 15y ago
Are there security concerns related to enabling CSS?
- netghost 15y agoAbsolutely! The styling could be entirely offensive, cause blindness, or unpleasant reactions.
- rudasn 15y agoI am not about now but there were a few. Google css xss. There was/is(?) the background-image on visited links "hack". Put simply, you could specify a background-image on a link to, let's say, facebook.com and you would know if the user has visited facebook because they would have loaded the image. I'm pretty sure today's browsers don't let you specify background images on visited links because of this.
- ez77 15y agoThanks, that led me to http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html http://scarybeastsecurity.blogspot.com/2009/12/generic-cross... .