PortSwigger Research company blog
CSS: The bomb inside your inbox
Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
- Points
- 101
- HN comments
- 44
- Submissions
- 1
- Cited by
- 0 commenters
Security & PrivacyWeb & Frontend2026
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| Aug 9, 2026 | CSS: The bomb inside your inbox by ashurandi | 101 | 44 |
