Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
And there we have it! Using nothing but CSS, the hacker has successfully extracted sensitive CSRF tokens from an unsuspecting user.