Characters allowed in between @import

Characters allowed in between @import

Created on: Sunday, October 19, 2025 at 5:19:50 PM

Updated on: Sunday, October 19, 2025 at 5:20:37 PM

Category: CSS Parsing

Vector visibility: Public

Vector type: XSS

Vector charset: UTF-8

<style>
@import$[chr]'//91e7358bc4c4.ngrok-free.app/test.css'
</style>
<div id=x>test</div>

window.getComputedStyle(x).color === 'rgb(255, 0, 0)' && log($[i])