Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

You can't steal data with #CSS alone, right? Wrong. If your #CSS is on a compromised CDN, or you can import a remote CSS via #XSS, you can grab all #data from form fields. Names, addresses, phone numbers & card data. Please, deploy #CSP and don't assume stylesheets aren't...

Paul_Reviews's profile picture

Paul Moore - Security Consultant 

14,770 subscribers

24,672 Aufrufe • vor 3 Monaten •via X (Twitter)

#CSS#CSS#XSS#data#CSP
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

Tailwind CSS Tip ✨ You can create a floating input form with Tailwind CSS using ":placeholder-shown" pseudo class. Live Demo & Code 👇 (8/30) follow for 22 more tips 🔔
0:17

Tailwind CSS Tip ✨ You can create a floating input form with Tailwind CSS using ":placeholder-shown" pseudo class. Live Demo & Code 👇 (8/30) follow for 22 more tips 🔔

Surjith S M ✪

173,050 Aufrufe • vor 3 Jahren

Tailwind CSS Tip ✨ You can create a pure css carousel in Tailwind CSS using scroll snap. Live demo ↓ (21/30) follow for 9 more tips 🔔
0:12

Tailwind CSS Tip ✨ You can create a pure css carousel in Tailwind CSS using scroll snap. Live demo ↓ (21/30) follow for 9 more tips 🔔

Surjith S M ✪

203,341 Aufrufe • vor 3 Jahren

Funny how you can do the same thing with a local model without sending all your data to a remote cloud.
0:18

Funny how you can do the same thing with a local model without sending all your data to a remote cloud.

Victor M

1,196,014 Aufrufe • vor 5 Monaten

OpenAI's Deep Research is getting a run for its money. Deep Lake was just released, and it's a different take on an AI system that can do deep research on your own data. You can use Deep Lake to build AI search with reasoning on your private and public data. (Look at the attached videos to get an idea of how it works.) If you want to research proprietary and sensitive data, Deep Research won't help you because it's limited to public data. Deep Lake, however, will allow you to use your private data. On top of that, Deep Lake supports multi-modal retrieval from the ground up. It uses vision language models for data ingestion and retrieval so that you can connect any data (PDFs, images, videos, structured data, etc.) You can even use mixed-data queries! Deep Lake can search your data from S3, Dropbox, and GCP. It learns from your queries over time, making the results as relevant to your work as possible!
0:15

OpenAI's Deep Research is getting a run for its money. Deep Lake was just released, and it's a different take on an AI system that can do deep research on your own data. You can use Deep Lake to build AI search with reasoning on your private and public data. (Look at the attached videos to get an idea of how it works.) If you want to research proprietary and sensitive data, Deep Research won't help you because it's limited to public data. Deep Lake, however, will allow you to use your private data. On top of that, Deep Lake supports multi-modal retrieval from the ground up. It uses vision language models for data ingestion and retrieval so that you can connect any data (PDFs, images, videos, structured data, etc.) You can even use mixed-data queries! Deep Lake can search your data from S3, Dropbox, and GCP. It learns from your queries over time, making the results as relevant to your work as possible!

Santiago

171,340 Aufrufe • vor 1 Jahr

When you try and position a dress with CSS...
0:14

When you try and position a dress with CSS...

Yoav Ganbar

24,647 Aufrufe • vor 3 Jahren

A 🔥 browser extension every CSS developer must have. CSS Scan lets you extract the code for any CSS element of all the websites across the internet. Check out CSS Scan and click on the below link to get a 25% discount👇
0:12

A 🔥 browser extension every CSS developer must have. CSS Scan lets you extract the code for any CSS element of all the websites across the internet. Check out CSS Scan and click on the below link to get a 25% discount👇

Shefali

29,340 Aufrufe • vor 1 Jahr

You can enable scroll snapping with CSS scroll-snap-type and scroll-snap-align 🚀
0:12

You can enable scroll snapping with CSS scroll-snap-type and scroll-snap-align 🚀

David Mráz

22,233 Aufrufe • vor 1 Jahr

Make your UI smarter with scroll-state()! → With CSS scroll-state() queries, you can easily manage stuck, snapped, and overflowing elements.
0:10

Make your UI smarter with scroll-state()! → With CSS scroll-state() queries, you can easily manage stuck, snapped, and overflowing elements.

Chrome for Developers

61,080 Aufrufe • vor 1 Jahr

you can now get data from auth'd APIs with DuckDB 🤯 ya know, to get your stripe data or whatever (it's not documented yet)
0:12

you can now get data from auth'd APIs with DuckDB 🤯 ya know, to get your stripe data or whatever (it's not documented yet)

archie 🦋

69,170 Aufrufe • vor 1 Jahr

Did you know that SSDs use quantum tunnelling to store data? Or that we have to completely rewrite RAM every 30ms to prevent data from just dissipating? If you did, then you can probably skip this chapter on how computers store data:
0:17

Did you know that SSDs use quantum tunnelling to store data? Or that we have to completely rewrite RAM every 30ms to prevent data from just dissipating? If you did, then you can probably skip this chapter on how computers store data:

Dan Hollick

356,965 Aufrufe • vor 4 Monaten

Smooth Edges for Marquees with CSS Mask 𝚖𝚊𝚜𝚔-𝚕-𝚏𝚛𝚘𝚖-𝟾𝟶% 𝚖𝚊𝚜𝚔-𝚛-𝚏𝚛𝚘𝚖-𝟾𝟶% Can be used on card skeletons, marquees, or anywhere you want to smooth out the edges.
0:15

Smooth Edges for Marquees with CSS Mask 𝚖𝚊𝚜𝚔-𝚕-𝚏𝚛𝚘𝚖-𝟾𝟶% 𝚖𝚊𝚜𝚔-𝚛-𝚏𝚛𝚘𝚖-𝟾𝟶% Can be used on card skeletons, marquees, or anywhere you want to smooth out the edges.

Manu Arora

58,395 Aufrufe • vor 3 Monaten

made only using css. no js listener used. took me longer than i thought it would. for hover state im doing `:has(*:is(.sidebar-icon-trigger:hover` so much you can do in css using pseudo classes. invest in css.
0:12

made only using css. no js listener used. took me longer than i thought it would. for hover state im doing `:has(*:is(.sidebar-icon-trigger:hover` so much you can do in css using pseudo classes. invest in css.

Soren

425,540 Aufrufe • vor 8 Monaten

💡 CSS Tip! Do you know that One-Time password field? You can create it using only one input and a few lines of CSS. The HTML: <input type="text" maxlength="6"> Code & Demo: You can control the number of characters by adjusting the maxlength attribute.
0:14

💡 CSS Tip! Do you know that One-Time password field? You can create it using only one input and a few lines of CSS. The HTML: <input type="text" maxlength="6"> Code & Demo: You can control the number of characters by adjusting the maxlength attribute.

CSS by T. Afif

25,194 Aufrufe • vor 1 Jahr

💡 DevTools tip: You can make your console.log stand out by adding some CSS to it! 🎨
0:13

💡 DevTools tip: You can make your console.log stand out by adding some CSS to it! 🎨

bolt.new

32,637 Aufrufe • vor 2 Jahren

💡CSS Tip! Create a tooltip that follows an anchor with modern CSS! No JavaScript is used to control the position of the tooltip or its tail. It's 100% CSS magic!
0:16

💡CSS Tip! Create a tooltip that follows an anchor with modern CSS! No JavaScript is used to control the position of the tooltip or its tail. It's 100% CSS magic!

CSS by T. Afif

57,769 Aufrufe • vor 8 Monaten

The CDC’s website is compromised. Ours isn’t. Find accurate, data-driven information on For you, your family, and all New Yorkers.
0:10

The CDC’s website is compromised. Ours isn’t. Find accurate, data-driven information on For you, your family, and all New Yorkers.

nychealthy

160,174 Aufrufe • vor 6 Monaten

Here is where it all begins, if you want, spend your data. It's on you.
0:15

Here is where it all begins, if you want, spend your data. It's on you.

Lola😍

65,836 Aufrufe • vor 4 Monaten

the trick to this css card glow/shine effect is blurring a duplicated layer that moves around 👨‍🍳 the og post mentions feGaussianBlur but you can use css filter blur too (there's a toggle 👇) filter: blur(28px) saturate(5) brightness(1.3) jus' need to test what plays best!
0:18

the trick to this css card glow/shine effect is blurring a duplicated layer that moves around 👨‍🍳 the og post mentions feGaussianBlur but you can use css filter blur too (there's a toggle 👇) filter: blur(28px) saturate(5) brightness(1.3) jus' need to test what plays best!

jhey ʕ•ᴥ•ʔ

102,613 Aufrufe • vor 4 Monaten

✨ Build Next.js, Tailwind CSS & shadcn websites with drag and drop. And yes, you can export the code. Link below.
0:16

✨ Build Next.js, Tailwind CSS & shadcn websites with drag and drop. And yes, you can export the code. Link below.

Mattia

205,173 Aufrufe • vor 1 Jahr

CSS Tip! ✨ Did you know you can animate CSS Grid tracks? 👀 ul:is(:hover,:focus-within) {--active: 1;} ul { grid-template-columns: auto repeat(3, calc(10px + (var(--active) * 100px))); transition: all 0.2s; } Adjust layouts based on interaction! 😎 CodePen.IO link below! 👇
0:18

CSS Tip! ✨ Did you know you can animate CSS Grid tracks? 👀 ul:is(:hover,:focus-within) {--active: 1;} ul { grid-template-columns: auto repeat(3, calc(10px + (var(--active) * 100px))); transition: all 0.2s; } Adjust layouts based on interaction! 😎 CodePen.IO link below! 👇

jhey ʕ•ᴥ•ʔ

30,561 Aufrufe • vor 3 Jahren