43
33
43
42Uses a list of CSS properties and functions that use CSP violations to determine which properties/functions cause external requests.
<div style="$[data1]:$[data2]('https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]')"></div><div style="-webkit-mask-box-image->image-set:('https://fuzz.shazzer.co.uk/26yyxgy3cwd?-webkit-mask-box-image->image-set->')"></div><div style="-webkit-mask-box-image->url:('https://fuzz.shazzer.co.uk/ayun9uyxbs?-webkit-mask-box-image->url->')"></div><div style="-webkit-mask-box-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/yd1kd3pew5l?-webkit-mask-box-image->-webkit-image-set->')"></div><div style="-webkit-mask-box-image-source->image-set:('https://fuzz.shazzer.co.uk/jnsz22y8yv7?-webkit-mask-box-image-source->image-set->')"></div><div style="-webkit-mask-box-image-source->url:('https://fuzz.shazzer.co.uk/0pigzlo0bber?-webkit-mask-box-image-source->url->')"></div><div style="-webkit-mask-box-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/zcnc5ovn0ea?-webkit-mask-box-image-source->-webkit-image-set->')"></div><div style="background->image-set:('https://fuzz.shazzer.co.uk/47xyh3quvsl?background->image-set->')"></div><div style="background->url:('https://fuzz.shazzer.co.uk/fv6m8dekceo?background->url->')"></div><div style="background->-webkit-image-set:('https://fuzz.shazzer.co.uk/hzqq1bl0y3p?background->-webkit-image-set->')"></div><div style="background-image->image-set:('https://fuzz.shazzer.co.uk/iw2kscej9c?background-image->image-set->')"></div><div style="background-image->url:('https://fuzz.shazzer.co.uk/xk2vavwp7n?background-image->url->')"></div><div style="background-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/m9102t0w6w?background-image->-webkit-image-set->')"></div><div style="border-image->image-set:('https://fuzz.shazzer.co.uk/mlocc3p52fe?border-image->image-set->')"></div><div style="border-image->url:('https://fuzz.shazzer.co.uk/8zdbohrodv?border-image->url->')"></div><div style="border-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/dgepmhjgi1?border-image->-webkit-image-set->')"></div><div style="border-image-source->image-set:('https://fuzz.shazzer.co.uk/y8xebjvsp6?border-image-source->image-set->')"></div><div style="border-image-source->url:('https://fuzz.shazzer.co.uk/geygzlbb6xk?border-image-source->url->')"></div><div style="border-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/1ioln5j4dkh?border-image-source->-webkit-image-set->')"></div><div style="clip-path->url:('https://fuzz.shazzer.co.uk/ubmlsnwumum?clip-path->url->')"></div><div style="content->image-set:('https://fuzz.shazzer.co.uk/zrxmu5dao4j?content->image-set->')"></div>