CSS: The bomb inside your inbox

Gareth Heyes - [email protected] - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
73 points by ashurandi 74 days ago portswigger.net 22 comments

Summary

Webmail clients often face security challenges when rendering untrusted CSS, which can lead to potential vulnerabilities. The article discusses the effectiveness of CSS sanitization methods in protecting users from these risks.

Comments (22 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open