Forwarded from 层叠 - The Cascading
Gareth Heyes 发现了一些透过 uBlock Origin 注入 CSS 的漏洞。通过 CSS 注入，攻击者可以获取页面上的内容，甚至在 Edge 用户查看输入的密码明文时窃取密码。
建议 uBlock Origin 用户更新到 11/22 发布的 1.39.0 或更新版本以修补该问题。
https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css
https://t.me/hackernewslive/114681
#uBlockOrigin #CSS
建议 uBlock Origin 用户更新到 11/22 发布的 1.39.0 或更新版本以修补该问题。
https://portswigger.net/research/ublock-i-exfiltrate-exploiting-ad-blockers-with-css
https://t.me/hackernewslive/114681
#uBlockOrigin #CSS
PortSwigger Research
uBlock, I exfiltrate: exploiting ad blockers with CSS
Ad blockers like uBlock Origin are extremely popular, and typically have access to every page a user visits. Behind the scenes, they're powered by community-provided filter lists - CSS selectors that