Discuss the CSS weakness/hack

Question

Anyone know the specifics for how CSS is being used for hacking lately?

Answer 1

As far as i know css isnt used for hacking. Or even cant be used for hacking.
The only thing i could imagine is that something is hidden with css and you could reveal it by chainging the css.

Answer 2

That sounds interesting. But as the article explaines some of it can be protected against by not allowing other code to be loaded in your website.

Answer 3

I read about a weakness with CSS in which information can be leached from users. I was hoping someone may be able to explain what exactly is the "hole" this is happening through. When I write code, I want my code to be secure as much as I can make it.

Answer 4

That sound like cross side scripting or something similar.

Do you know where you read about this?

Im a frontend developer and also like my frontend as secure as possible.

Answer 5

https://www.bleepingcomputer.com/news/security/css-code-can-be-abused-to-collect-sensitive-user-data/ I found the explanation 😀

Answer 6

I read it recently from another source that did not state the earlier reference. Therefore, I found that this is an older topic than what I first assumed.

Answer 7

Interesting. Looks like it can be prevented by just not using CSS attribute selectors or by implementing that (CSP) Content Security Policy.

Anyway Ginger Mae , you said that it was "used for hacking lately" and that article was from the beginning of 2018. Are you sure that this is what you have been hearing about lately or is there possibly a newer CSS vulnerability?