A timing attack with CSS selectors and JavaScript

Have you ever encountered a website that runs `jQuery(location.hash)`? It turns out this allows you to perform a powerful timing attack that can extract almost any secret from the HTML. | Continue reading

---

@blog.sheddow.xyz | 5 years ago