360 cross-origin CSS vulnerability in browser 5.0 and earlier versions

360 browser 5.0 and earlier # Cross-origin CSS vulnerability
Although not the latest version, many users are using --.

360 browser 5.0 and earlier # Cross-origin CSS vulnerability

 

Download the official version of 360 browser 5.0 and test it --.

 

3.0 and so on, the same vulnerability exists, so I can take 5.0 to open it --.
 
Construct two local pages:

Test.html

 

Use 360viewer 5.0 test2.html
 


In test2.html, test.html is loaded as a CSS file through @ import, rendering the file into the current DOM, and accessing this content through document. body. currentStyle. fontFamily. The problem occurs on the page content of CSS transform.
Solution:
Patch :)