Web security tools usually scan only JavaScript code and not CSS. Furthermore, they only scan a static version of the JavaScript code, without actually executing it.

With the recent upgrades to the CSS language, CSS code has become a powerful tool that could be abused to track users on websites, extract and steal data from a web page, collect data entered ...