This doesn’t seem to work? At least not in firefox. https://codepen.io/flyingfisch/pen/wyjQGP
There’s a lot of browser specific setup and a whole nodejs server included in this. I would not qualify this as “pure” CSS keylogging. Neat stuff though!
The actual keylogging inside is done inside of CSS; you’d still need something to exfiltrate it with.
It works if you can get style injection on a site already using JS to update the .value, though. (e.g. React)
I think, in that situation, React is the keylogger.
Sure - but it’s a pretty widely installed one.