正在加载视频...

视频加载失败

返回首页

You can't steal data with #CSS alone, right? Wrong. If your #CSS is on a compromised CDN, or you can import a remote CSS via #XSS, you can grab all #data from form fields. Names, addresses, phone numbers & card data. Please, deploy #CSP and don't assume stylesheets aren't...

Paul_Reviews's profile picture

Paul Moore - Security Consultant 

14,770 subscribers

24,672 次观看 • 4 个月前 •via X (Twitter)

#CSS#CSS#XSS#data#CSP
LIVE

Anya Rossi• Live Now

Private livecam show

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

Tailwind CSS Tip ✨ You can create a floating input form with Tailwind CSS using ":placeholder-shown" pseudo class. Live Demo & Code 👇 (8/30) follow for 22 more tips 🔔
0:17

Tailwind CSS Tip ✨ You can create a floating input form with Tailwind CSS using ":placeholder-shown" pseudo class. Live Demo & Code 👇 (8/30) follow for 22 more tips 🔔

Surjith S M ✪

173,050 次观看 • 3 年前

Tailwind CSS Tip ✨ You can create a pure css carousel in Tailwind CSS using scroll snap. Live demo ↓ (21/30) follow for 9 more tips 🔔
0:12

Tailwind CSS Tip ✨ You can create a pure css carousel in Tailwind CSS using scroll snap. Live demo ↓ (21/30) follow for 9 more tips 🔔

Surjith S M ✪

203,341 次观看 • 3 年前

Funny how you can do the same thing with a local model without sending all your data to a remote cloud.
0:18

Funny how you can do the same thing with a local model without sending all your data to a remote cloud.

Victor M

1,196,014 次观看 • 5 个月前

OpenAI's Deep Research is getting a run for its money. Deep Lake was just released, and it's a different take on an AI system that can do deep research on your own data. You can use Deep Lake to build AI search with reasoning on your private and public data. (Look at the attached videos to get an idea of how it works.) If you want to research proprietary and sensitive data, Deep Research won't help you because it's limited to public data. Deep Lake, however, will allow you to use your private data. On top of that, Deep Lake supports multi-modal retrieval from the ground up. It uses vision language models for data ingestion and retrieval so that you can connect any data (PDFs, images, videos, structured data, etc.) You can even use mixed-data queries! Deep Lake can search your data from S3, Dropbox, and GCP. It learns from your queries over time, making the results as relevant to your work as possible!
0:15

OpenAI's Deep Research is getting a run for its money. Deep Lake was just released, and it's a different take on an AI system that can do deep research on your own data. You can use Deep Lake to build AI search with reasoning on your private and public data. (Look at the attached videos to get an idea of how it works.) If you want to research proprietary and sensitive data, Deep Research won't help you because it's limited to public data. Deep Lake, however, will allow you to use your private data. On top of that, Deep Lake supports multi-modal retrieval from the ground up. It uses vision language models for data ingestion and retrieval so that you can connect any data (PDFs, images, videos, structured data, etc.) You can even use mixed-data queries! Deep Lake can search your data from S3, Dropbox, and GCP. It learns from your queries over time, making the results as relevant to your work as possible!

Santiago

171,340 次观看 • 1 年前

When you try and position a dress with CSS...
0:14

When you try and position a dress with CSS...

Yoav Ganbar

24,647 次观看 • 3 年前

A 🔥 browser extension every CSS developer must have. CSS Scan lets you extract the code for any CSS element of all the websites across the internet. Check out CSS Scan and click on the below link to get a 25% discount👇
0:12

A 🔥 browser extension every CSS developer must have. CSS Scan lets you extract the code for any CSS element of all the websites across the internet. Check out CSS Scan and click on the below link to get a 25% discount👇

Shefali

29,340 次观看 • 1 年前

You can enable scroll snapping with CSS scroll-snap-type and scroll-snap-align 🚀
0:12

You can enable scroll snapping with CSS scroll-snap-type and scroll-snap-align 🚀

David Mráz

22,233 次观看 • 1 年前

Make your UI smarter with scroll-state()! → With CSS scroll-state() queries, you can easily manage stuck, snapped, and overflowing elements.
0:10

Make your UI smarter with scroll-state()! → With CSS scroll-state() queries, you can easily manage stuck, snapped, and overflowing elements.

Chrome for Developers

61,080 次观看 • 1 年前

you can now get data from auth'd APIs with DuckDB 🤯 ya know, to get your stripe data or whatever (it's not documented yet)
0:12

you can now get data from auth'd APIs with DuckDB 🤯 ya know, to get your stripe data or whatever (it's not documented yet)

archie 🦋

69,170 次观看 • 1 年前

Did you know that SSDs use quantum tunnelling to store data? Or that we have to completely rewrite RAM every 30ms to prevent data from just dissipating? If you did, then you can probably skip this chapter on how computers store data:
0:17

Did you know that SSDs use quantum tunnelling to store data? Or that we have to completely rewrite RAM every 30ms to prevent data from just dissipating? If you did, then you can probably skip this chapter on how computers store data:

Dan Hollick

356,965 次观看 • 4 个月前

Smooth Edges for Marquees with CSS Mask 𝚖𝚊𝚜𝚔-𝚕-𝚏𝚛𝚘𝚖-𝟾𝟶% 𝚖𝚊𝚜𝚔-𝚛-𝚏𝚛𝚘𝚖-𝟾𝟶% Can be used on card skeletons, marquees, or anywhere you want to smooth out the edges.
0:15

Smooth Edges for Marquees with CSS Mask 𝚖𝚊𝚜𝚔-𝚕-𝚏𝚛𝚘𝚖-𝟾𝟶% 𝚖𝚊𝚜𝚔-𝚛-𝚏𝚛𝚘𝚖-𝟾𝟶% Can be used on card skeletons, marquees, or anywhere you want to smooth out the edges.

Manu Arora

58,395 次观看 • 3 个月前

made only using css. no js listener used. took me longer than i thought it would. for hover state im doing `:has(*:is(.sidebar-icon-trigger:hover` so much you can do in css using pseudo classes. invest in css.
0:12

made only using css. no js listener used. took me longer than i thought it would. for hover state im doing `:has(*:is(.sidebar-icon-trigger:hover` so much you can do in css using pseudo classes. invest in css.

Soren

425,540 次观看 • 8 个月前

💡 DevTools tip: You can make your console.log stand out by adding some CSS to it! 🎨
0:13

💡 DevTools tip: You can make your console.log stand out by adding some CSS to it! 🎨

bolt.new

32,637 次观看 • 2 年前

💡 CSS Tip! Do you know that One-Time password field? You can create it using only one input and a few lines of CSS. The HTML: <input type="text" maxlength="6"> Code & Demo: You can control the number of characters by adjusting the maxlength attribute.
0:14

💡 CSS Tip! Do you know that One-Time password field? You can create it using only one input and a few lines of CSS. The HTML: <input type="text" maxlength="6"> Code & Demo: You can control the number of characters by adjusting the maxlength attribute.

CSS by T. Afif

25,194 次观看 • 1 年前

The CDC’s website is compromised. Ours isn’t. Find accurate, data-driven information on For you, your family, and all New Yorkers.
0:10

The CDC’s website is compromised. Ours isn’t. Find accurate, data-driven information on For you, your family, and all New Yorkers.

nychealthy

160,174 次观看 • 6 个月前

💡CSS Tip! Create a tooltip that follows an anchor with modern CSS! No JavaScript is used to control the position of the tooltip or its tail. It's 100% CSS magic!
0:16

💡CSS Tip! Create a tooltip that follows an anchor with modern CSS! No JavaScript is used to control the position of the tooltip or its tail. It's 100% CSS magic!

CSS by T. Afif

57,769 次观看 • 8 个月前

Here is where it all begins, if you want, spend your data. It's on you.
0:15

Here is where it all begins, if you want, spend your data. It's on you.

Lola😍

65,836 次观看 • 5 个月前

the trick to this css card glow/shine effect is blurring a duplicated layer that moves around 👨‍🍳 the og post mentions feGaussianBlur but you can use css filter blur too (there's a toggle 👇) filter: blur(28px) saturate(5) brightness(1.3) jus' need to test what plays best!
0:18

the trick to this css card glow/shine effect is blurring a duplicated layer that moves around 👨‍🍳 the og post mentions feGaussianBlur but you can use css filter blur too (there's a toggle 👇) filter: blur(28px) saturate(5) brightness(1.3) jus' need to test what plays best!

jhey ʕ•ᴥ•ʔ

103,454 次观看 • 4 个月前

✨ Build Next.js, Tailwind CSS & shadcn websites with drag and drop. And yes, you can export the code. Link below.
0:16

✨ Build Next.js, Tailwind CSS & shadcn websites with drag and drop. And yes, you can export the code. Link below.

Mattia

205,173 次观看 • 1 年前

CSS Tip! ✨ Did you know you can animate CSS Grid tracks? 👀 ul:is(:hover,:focus-within) {--active: 1;} ul { grid-template-columns: auto repeat(3, calc(10px + (var(--active) * 100px))); transition: all 0.2s; } Adjust layouts based on interaction! 😎 CodePen.IO link below! 👇
0:18

CSS Tip! ✨ Did you know you can animate CSS Grid tracks? 👀 ul:is(:hover,:focus-within) {--active: 1;} ul { grid-template-columns: auto repeat(3, calc(10px + (var(--active) * 100px))); transition: all 0.2s; } Adjust layouts based on interaction! 😎 CodePen.IO link below! 👇

jhey ʕ•ᴥ•ʔ

30,561 次观看 • 3 年前