Stealing Data with CSS: Attack and Defense 8 years agoThis is useful if you have a reflective XSS that is getting blocked by xss auditor (like in chrome, safari) or a csp policy limiting script-src. 0ThreadHN