| <style> | |
| a[href]::before { content: url('https://attacker.example/attrsel'); } | |
| </style> | |
| <div style="background:url(https://attacker.example/inlinediv)">test</div> | |
| <p style="position:fixed;top:0;left:0;width:100vw;min-height:100vh;background:url('https://attacker.example/fixedoverlay')">overlay</p> |