Inject XSS into CSS rules
Inject XSS redirect URL header
Fernando Reyes (@null1433)