There are known Style Attribute XSS attacks like:
Or 4条回答 眼角桃花 (楼主) 2020-12-03 01:37 Security rule #1: If you are the least in doubt, presume there is a hole. What are you trying to achieve? What functionality would cause CSS from an untrusted source? 0 讨论(0) 查看其它4个回答 发布评论: 提交评论 加载中... 验证码 看不清? 提交回复
Or
Security rule #1: If you are the least in doubt, presume there is a hole.
What are you trying to achieve? What functionality would cause CSS from an untrusted source?