Re:Hackers hide web skimmer inside a website's CSS
by croes on Saturday December 12, 2020 @05:07AM
(#25397199)
That's first time I heard CSS is allowed to load and run.
WTF
[ Parent
| on HN ]
Re:Hackers hide web skimmer inside a website's CSS
by bstasse on Saturday December 12, 2020 @06:15AM
(#25397538)
As mentioned in other comments, CSS does not run scripts. In this case, it is just used to store the content of a script as a string in a custom property, which is then retrieved by another script, and run.