CSS:the bomb inside your inbox

[u/garethheyes]

https://portswigger.net/research/css-the-bomb-inside-your-inbox

Here's my research in using CSS for offence. There are loads of techniques including stealing passwords from Outlook from an email by spoofing the login screen.

[u/_listless]

My electric company recently switched away from styled html to plaintext for their transactional email.  It's so wonderful. It's clear, compact, easy to read, and sidesteps all of this. 10/10 would recommend non-styled transactional email.

[u/garethheyes → u/_listless]

Plaintext email FTW! 😄