43
33
43
42Uses a list of CSS properties and functions that use CSP violations to determine which properties/functions cause external requests.
<div style="$[data1]:$[data2]('https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]')"></div><div style="-webkit-mask-box-image->image-set:('https://fuzz.shazzer.co.uk/otgor3vetgm?-webkit-mask-box-image->image-set->')"></div><div style="-webkit-mask-box-image->url:('https://fuzz.shazzer.co.uk/derque3ye5h?-webkit-mask-box-image->url->')"></div><div style="-webkit-mask-box-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/bfflcoip3x?-webkit-mask-box-image->-webkit-image-set->')"></div><div style="-webkit-mask-box-image-source->image-set:('https://fuzz.shazzer.co.uk/mj46yuky9il?-webkit-mask-box-image-source->image-set->')"></div><div style="-webkit-mask-box-image-source->url:('https://fuzz.shazzer.co.uk/3fon6b74cz?-webkit-mask-box-image-source->url->')"></div><div style="-webkit-mask-box-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/0bwky3pcraq5?-webkit-mask-box-image-source->-webkit-image-set->')"></div><div style="background->image-set:('https://fuzz.shazzer.co.uk/7vptqswmjv5?background->image-set->')"></div><div style="background->url:('https://fuzz.shazzer.co.uk/00vy557mqf9mn?background->url->')"></div><div style="background->-webkit-image-set:('https://fuzz.shazzer.co.uk/kkkvgjso08j?background->-webkit-image-set->')"></div><div style="background-image->image-set:('https://fuzz.shazzer.co.uk/ts5q21arn5e?background-image->image-set->')"></div><div style="background-image->url:('https://fuzz.shazzer.co.uk/0941db750p3h?background-image->url->')"></div><div style="background-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/dmxqygd6mth?background-image->-webkit-image-set->')"></div><div style="border-image->image-set:('https://fuzz.shazzer.co.uk/3l3l7b2qf9o?border-image->image-set->')"></div><div style="border-image->url:('https://fuzz.shazzer.co.uk/3xk575fp4nq?border-image->url->')"></div><div style="border-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/e2hwfw5p1kt?border-image->-webkit-image-set->')"></div><div style="border-image-source->image-set:('https://fuzz.shazzer.co.uk/4s2slr26kkm?border-image-source->image-set->')"></div><div style="border-image-source->url:('https://fuzz.shazzer.co.uk/wj2o4arv6j?border-image-source->url->')"></div><div style="border-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/2o6y6auei5m?border-image-source->-webkit-image-set->')"></div><div style="clip-path->url:('https://fuzz.shazzer.co.uk/wjvbdc42ge?clip-path->url->')"></div><div style="content->image-set:('https://fuzz.shazzer.co.uk/yuhuxocr98?content->image-set->')"></div>