Home / Web Security / CSRF > Stealing CSRF tokens with CSS injection (without iFrames) CSRF > Stealing CSRF tokens with CSS injection (without iFrames) Written by @dxa4481. Package 324 stars GitHub Back to Web Security