Otherwise known as how you can expose private user information like passwords using CSS if you don’t know what you’re doing.
It is nice to see CSS growing up: transitioning from inconsistent browser support back in the day to CSS injections now seems like a very adult phase.