CSS Cross Site Scripting/CSSXSS

Field :
Security network Web CSS Cross Site Scripting

The style seat of Internet Explorer(CSS) the vulnerability which lies hiddenin callfunction the attack technique which is attached. As for the attack person, it is possibleto procurenon- justinformation from the computer of the victim by makingthe Web page peruse which includes illegitimate CSS import.

With CSS outsideit is placedin another domain the style seat file using "@import" declaration, and the like it reads (it imports) it can do thing, but in orderwithInternet Explorerto distinguishthe type of external file automatically,file name it is understood, "{" it extractsthe textfile which enters freely.Import method is known, finishes @import, addimport and the link element, xml-stylesheet and the likewhenthe file which is importedis described with Shift- JIS,"?" of the katakana which character code "{" with resembles and "?" etc. having entered, being extracted.

CSS Level 1

Reading : Sea s s level one
Full spelling : Cascading Style Sheet Level 1
Field :
Expression of information markup language HTML CSS Level 1
WWW Production CSS Level 1

CSS Level 2

Reading : Sea s s level two
Full spelling : Cascading Style Sheet Level 2
Field :
Expression of information >markup language HTML CSS Level 2
WWW Production CSS Level 2

CSSXSS CSS Cross Site Scripting Reading : Sea s s x s s
Field :
Security network Web CSSXSS

The style seatof Internet Explorer(CSS) the vulnerability which lies hiddenin callfunction the attack technique which is attached. As for the attack person, it is possibleto procurenon- justinformation from the computer of the victim by makingthe Web page peruse which includes illegitimate CSS import.

WithCSS outsideit is placedin another domain the style seat file using "@import" declaration, and the like it reads (it imports) it can do thing, but in orderwithInternet Explorerto distinguishthe type of external file automatically,file name it is understood, "{" it extractsthe textfile which enters freely.Import method is known, finishes @import, addimport and the link element, xml-stylesheet and the likewhenthe file which is importedis described with Shift- JIS,"?" of the katakana which character code "{" with resembles and "?" etc. having entered, being extracted.

CSSXSS CSS Cross Site Scripting

Reading : Sea s s x s s
Field :
Security network Web CSSXSS

The style seatof Internet Explorer(CSS) the vulnerability which lies hiddenin callfunction the attack technique which is attached. As for the attack person, it is possibleto procurenon- justinformation from the computer of the victim by makingthe Web page peruse which includes illegitimate CSS import.

WithCSS outsideit is placedin another domain the style seat file using "@import" declaration, and the like it reads (it imports) it can do thing, but in orderwithInternet Explorerto distinguishthe type of external file automatically,file name it is understood, "{" it extractsthe textfile which enters freely.Import method is known, finishes @import, addimport and the link element, xml-stylesheet and the like when the file which is importedis described with Shift- JIS,"?" of the katakana which character code "{" with resembles and "?" etc. having entered, being extracted.

CSS level 1

Field :
Expression of information > markup language TML CSS level 1
WWW Production CSS level 1

Thefirst editionof the CSS standard which defines the layout of the page whichis writtenwith HTML and XML.Withthe standard where the concept of CSS is displayed for the first time,the element whichactualizes mounting possibility, basic layout even with the HTML tag has been defined on the center.Besides the fact that NETSCAPE6/Mozilla has sung the complete correspondence to of CSS Level 1, also after of the Internet Explorer 5 corresponds to the considerable part of CSS Level 1.