Original post on mastodon.social (mastodon.social)

CSS:the bomb inside your inbox | PortSwigger Research https://portswigger.net/research/css-the-bomb-inside-your-inbox It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this paper I'm going to show you how to […]