NULL CATHEDRAL - Css https://nullcathedral.com/tags/css/ Generated: 2026-04-10 ================================================================================ 2026-03-18 | Roundcube round two: three more sanitizer bypasses https://nullcathedral.com/posts/2026-03-18-roundcube-round-two-three-more-sanitizer-bypasses/ Three more bypasses in Roundcube's HTML sanitizer: SMIL animation attributes load remote resources, unquoted body backgrounds enable CSS injection, and position:fixed !important enables phishing overlays.