search

xsleaks / wiki

XS-Leaks Wiki
https://xsleaks.dev
Apache License 2.0
145 stars 39 forks source link

CSS Injection section #122

Closed terjanq closed 2 years ago

terjanq commented 2 years ago

Even though CSS injections in general are not considered XS-Leaks directly, there are some cross-site techniques to smuggle data outside via CSS only.

Maybe it would make sense to create a one section called CSS Injection and bring all the known techniques there. We have mentioned about CSS injection in execution timing: https://xsleaks.dev/docs/attacks/timing-attacks/execution-timing/#css-injections

terjanq commented 2 years ago

Some research into that: https://x-c3ll.github.io/posts/CSS-Injection-Primitives/

terjanq commented 2 years ago

https://github.com/xsleaks/wiki/pull/123