← Back to feed
Vendors & MarketEmerging1 sourceAug 6, 2026 · 22:00via PortSwigger Research

CSS:the bomb inside your inbox

Brief

Gareth Heyes - gareth. heyes@portswigger. net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this

Read more on PortSwigger Research