A timing attack with CSS selectors and JavascriptHave you ever encountered a website that runs jQuery(location.hash)? Seemingly pretty harmless, right? location.hash always starts with a "#" so all this code does is execute a CSS query selector. It turns out that's enough to perform a timing attack that can extract almost any secret string from the HTML. Let's start with the basics. A CSS selector is used to match and select HTML elements and lo
