43
33
43
42Uses a list of CSS properties and functions that use CSP violations to determine which properties/functions cause external requests.
<div style="$[data1]:$[data2]('https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]')"></div><div style="-moz-border-image->image-set:('https://fuzz.shazzer.co.uk/hirbi1mpdy6?-moz-border-image->image-set->')"></div><div style="-moz-border-image->url:('https://fuzz.shazzer.co.uk/sqddsby1hhn?-moz-border-image->url->')"></div><div style="-moz-border-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/w5otmyrp8f?-moz-border-image->-webkit-image-set->')"></div><div style="background->image-set:('https://fuzz.shazzer.co.uk/8t08mu11bz5?background->image-set->')"></div><div style="background->url:('https://fuzz.shazzer.co.uk/t4olwni8h3j?background->url->')"></div><div style="background->-webkit-image-set:('https://fuzz.shazzer.co.uk/7snnsss3nyu?background->-webkit-image-set->')"></div><div style="background-image->image-set:('https://fuzz.shazzer.co.uk/w47qakyfbp?background-image->image-set->')"></div><div style="background-image->url:('https://fuzz.shazzer.co.uk/xjvt8ur1tl8?background-image->url->')"></div><div style="background-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/i3e8o68bfh?background-image->-webkit-image-set->')"></div><div style="border-image->image-set:('https://fuzz.shazzer.co.uk/wy0fj40lohl?border-image->image-set->')"></div><div style="border-image->url:('https://fuzz.shazzer.co.uk/bvu286qj4q?border-image->url->')"></div><div style="border-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/fobe8oti9cr?border-image->-webkit-image-set->')"></div><div style="border-image-source->image-set:('https://fuzz.shazzer.co.uk/lq8ac16c47?border-image-source->image-set->')"></div><div style="border-image-source->url:('https://fuzz.shazzer.co.uk/1rn9101e346i?border-image-source->url->')"></div><div style="border-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/ktu7gnncwr?border-image-source->-webkit-image-set->')"></div><div style="content->image-set:('https://fuzz.shazzer.co.uk/b0406airaw?content->image-set->')"></div><div style="content->url:('https://fuzz.shazzer.co.uk/3sg501ahk2n?content->url->')"></div><div style="content->-webkit-image-set:('https://fuzz.shazzer.co.uk/3fhkkdglk4f?content->-webkit-image-set->')"></div><div style="list-style->image-set:('https://fuzz.shazzer.co.uk/yj1zegz491i?list-style->image-set->')"></div><div style="list-style->url:('https://fuzz.shazzer.co.uk/vb5mfpfzcz?list-style->url->')"></div>