CSS

To protect against this threat, the Firefox  108 default theme has been updated to ensure that the cursor is drawn outside of the browser UI.

By default, CSS variables are not supported in Firefox. The only way to enable them is to add a userContent preference. This preference is enabled

The attacker would need to host a malicious stylesheet on a malicious server—for example, if they have compromised the same server. In cases where

An attacker can trick a user into entering malicious code into the profile form via XSS. XSS is a type of malicious code that can