43
33
42Uses a list of CSS properties and functions that use CSP violations to determine which properties/functions cause external requests.
<div style="$[data1]:$[data2]('https://fuzz.shazzer.co.uk/$[rand]?$[data1]->$[data2]')"></div><div style="-webkit-mask-box-image->image-set:('https://fuzz.shazzer.co.uk/fo85emac2l5?-webkit-mask-box-image->image-set->')"></div><div style="-webkit-mask-box-image->url:('https://fuzz.shazzer.co.uk/5ihx8gituy5?-webkit-mask-box-image->url->')"></div><div style="-webkit-mask-box-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/f4o1zghx9h?-webkit-mask-box-image->-webkit-image-set->')"></div><div style="-webkit-mask-box-image-source->image-set:('https://fuzz.shazzer.co.uk/9negevfw2nr?-webkit-mask-box-image-source->image-set->')"></div><div style="-webkit-mask-box-image-source->url:('https://fuzz.shazzer.co.uk/3oenduc7npc?-webkit-mask-box-image-source->url->')"></div><div style="-webkit-mask-box-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/roch3wvgoz?-webkit-mask-box-image-source->-webkit-image-set->')"></div><div style="background->image-set:('https://fuzz.shazzer.co.uk/0bt7fqtctgpp?background->image-set->')"></div><div style="background->url:('https://fuzz.shazzer.co.uk/new3jyevo5?background->url->')"></div><div style="background->-webkit-image-set:('https://fuzz.shazzer.co.uk/zar6df9ksv?background->-webkit-image-set->')"></div><div style="background-image->image-set:('https://fuzz.shazzer.co.uk/8yg87nljvtj?background-image->image-set->')"></div><div style="background-image->url:('https://fuzz.shazzer.co.uk/2bv9k41vomh?background-image->url->')"></div><div style="background-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/dvhtzjblzq?background-image->-webkit-image-set->')"></div><div style="border-image->image-set:('https://fuzz.shazzer.co.uk/q4o35u280sb?border-image->image-set->')"></div><div style="border-image->url:('https://fuzz.shazzer.co.uk/vmpbbkdqhef?border-image->url->')"></div><div style="border-image->-webkit-image-set:('https://fuzz.shazzer.co.uk/54v4bif9agx?border-image->-webkit-image-set->')"></div><div style="border-image-source->image-set:('https://fuzz.shazzer.co.uk/b19s7lttfjb?border-image-source->image-set->')"></div><div style="border-image-source->url:('https://fuzz.shazzer.co.uk/cz2ysgbqufc?border-image-source->url->')"></div><div style="border-image-source->-webkit-image-set:('https://fuzz.shazzer.co.uk/w2thtoiyfhp?border-image-source->-webkit-image-set->')"></div><div style="clip-path->url:('https://fuzz.shazzer.co.uk/obhpci6bt39?clip-path->url->')"></div><div style="content->image-set:('https://fuzz.shazzer.co.uk/vrpm4liayog?content->image-set->')"></div>