mlgualtieri / CSS-Exfil-Protection

Official repository for the CSS Exfil Protection browser extensions.
MIT License
149 stars 11 forks source link

Cascading Style Sheets (CSS) data leakage questions about HTML style attribute #39

Closed ribbybbir closed 1 year ago

ribbybbir commented 1 year ago

Hello Mike Gualtieri,

I recently checked out your css exfil vulnerability page ( https://www.mike-gualtieri.com/css-exfil-vulnerability-tester ), and I knew that css would one day be a internet menace. I want to utilize the CSS-Exfil-Protection in case I need to access CSS for easier user interface readability, if not usability. Of course, putting off CSS instances is a better way.

I get that I will have to hold off HTML Styles - CSS ( https://www.w3schools.com/html/html_css.asp ) in the following methods.

Inline - by using the style attribute inside HTML elements Internal - by using a