diff --git a/README.md b/README.md index ccb8360..ac75c9d 100644 --- a/README.md +++ b/README.md @@ -634,6 +634,7 @@ event: message\ndata: \n\n CSS Content Property Injection If an application allows user input in CSS properties without sanitization, it can lead to XSS. +Note:most browsers consider the content property text not html and this works under very certain conditions unsure whether the browser still accepts this however i have inserted here as a use case. ```