CSK demo
Friday, 31 August 2007
I’ve put together a little CSK demo, it’s still early stages yet and there’s quite a bit more I can do but I thought I’d share the code early because I’ve a lot on at the moment and it might be a while before the next update and also it’s really interesting stuff.
It just goes to show that CSS standards are becoming way too powerful. I’ve found all sorts of stuff looking through the CSS 3 specification, regular expressions, and/or/not etc.
The Kit currently includes 2 sections at the moment: conditional history and data storage. It’s possible to tell if you have visited any URL and store data on the fly without refreshing the page.
Keep your eye on this page for updates.
No. 1 — August 31st, 2007 at 2:04 pm
Hum, in your demo, I only see CSS 2 Selectors, which are implemented correctly in numbers of browsers (even WebKit and Opera if I remember well…)
No. 2 — August 31st, 2007 at 2:10 pm
Hi nEUrOO
I don’t know if that is good news or bad news….I’m going to add some more stuff soon which will use CSS 3, I think my confusion was that some of the selectors used were defined in CSS 2 but improved in CSS 3.
No. 3 — August 31st, 2007 at 2:30 pm
Impressive.
No. 4 — August 31st, 2007 at 2:36 pm
Actually, it’s a good news for you, since it should work but not only with firefox 🙂
(depending how thorough is the implementation of the CSS 2 Selectors)
No. 5 — August 31st, 2007 at 2:40 pm
Yeah good news for the CSK but rather bad news if it works in all browsers from a personal security perspective….
I’m not sure if this is a bug in Firefox or the standards need revision. Either way it’s not good.
No. 6 — August 31st, 2007 at 2:45 pm
Well, for a design point of view, selectors are important and it really changes the way of using the CSS 🙂
But I really think that the problem here is not exactly in the CSS spec. or whatever but more in the way browsers allows the “history” stuff… really bad for privacy.
No. 7 — August 31st, 2007 at 3:04 pm
Yep bad for privacy and also can be used for other things like my CSS lAN scanning demo. Because the browser can create browser history and then find if it was successful.
No. 8 — April 26th, 2009 at 2:58 am
<b> Xss </b>
No. 9 — April 26th, 2009 at 10:29 am
Ouch you got me