Overcoming Browser-Based Side-Channel Defenses (2021)
arxiv.org
arxiv.org
> Our final attack, CSS Prime+Probe targets an even more restricted setting, in which the browser does not support JavaScript or any other scripting language, for example due to the NoScript extension [51]. CSS Prime+Probe only uses plain HTML and Cascading Style Sheets (CSS) to perform a cache occupancy attack, without using JavaScript at all.