diff --git a/README.md b/README.md index 1661ae5..d50469b 100644 --- a/README.md +++ b/README.md @@ -634,6 +634,7 @@ event: message\ndata: \n\n CSS Content Property Injection If an application allows user input in CSS properties without sanitization, it can lead to XSS. +Note:most browsers consider the content property text not html and this works under very certain conditions unsure whether the browser still accepts this however i have inserted here as a use case. ```