CSS:the bomb inside your inbox
Gareth Heyes - [email protected] - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
https://portswigger.net/research/css-the-bomb-inside-your-inbox

1
1August 30, 2026 489 3