news
PortSwigger Research
August 6th, 2026 at 10:00 PM

CSS:the bomb inside your inbox

Gareth Heyes - gareth.heyes@portswigger.net - @garethheyes It's quite common for webmail clients to render untrusted CSS in a trusted UI. They attempt to make this safe using CSS sanitization. In this

#ai

Get stories like this every Monday

The week's most important AI news in one email. Free, unsubscribe anytime.

Score: 2.15

Engagement proxy: 0

Canonical link: https://portswigger.net/research/css-the-bomb-inside-your-inbox