CSK CSS Scripting Kit

I’m currently in the process of developing a CSS Scripting Kit called “CSK”, this kit will allow you to perform scripting actions that normally would be reserved for Javascript. I believe the standards that browser manufacturers are adopting create major security holes and if they don’t either create new security policies to adapt to this or remove the features altogether we are going to have a major problem in future.

I hope creating this kit will demonstrate to them that they need to take their security policies seriously and hopefully show them that even simple features can be used to create security holes. Stay tuned to this blog for future updates of CSK and I shall be releasing my research soon.

10 Responses to “CSK CSS Scripting Kit”

  1. Dennison Uy writes:

    It would be nice if you tell us what these “scripting” actions are (mouseovers? lightboxes? buttons?). I’m looking forward to seeing what CSK can do though.

  2. Gareth Heyes writes:

    Yeah mouseover,storage,history reading,network scanning,positioning etc I will be expanding it and it will use PHP + CSS, I shall of course keep the code as simple as possible as always.

  3. Dennison Uy writes:

    Awesome! Can’t wait to see it. Cheers.

  4. Gareth Heyes writes:

    I’m currently working on the storage side now, I can send data with CSS, I’m just trying to figure out a way to receive it without refreshing the page.

  5. Dennison Uy writes:

    Wow you can actually do that with CSS? Is this a standard across all browsers?

  6. Gareth Heyes writes:

    Not sure yet, it looks like there might be a way. The kit will be released as Firefox only to start with but I imagine there will be plenty of potential for other browsers as they adopt more CSS 3 standards.

  7. mars writes:

    Is there a way to have a proper look at your CSK code? (The Kit itself)

  8. mars writes:

    What I am asking is… have you released it? If so where because I’d love to play around with it.

  9. Gareth Heyes writes:

    @mars

    It’s not released yet because it isn’t very polished but I’ll provide you with the source if you like:-

    http://www.businessinfo.co.uk/labs/css_scripting_kit/csk.zip

    Enjoy 🙂

  10. mars writes:

    Much appreciated! You are a prince amongst men!