PortSwigger Research
CSS:the bomb inside your inbox
Gareth Heyes - [email protected] - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this
1August 13, 2026 362 8
