TechLobstersabout 2 hours ago
CSS: the bomb inside your inbox
1 min read
CSS sanitization flaws in webmail clients enable token theft, UI control, and prompt injection. Researchers targeted Yahoo Mail, AOL Mail, Fastmail, ProtonMail, GMail, Outlook, and OpenAI's Atlas. Outlook's label bug remains unfixed. Firefox allows inline style tags, enabling clipboard-based CSS attacks on Medium's login tokens.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
