title: Cross Site Scripting in CSS Stylesheets
body: <p>Is it possible to use cross site scripting in a CSS stylesheet? For example a reference stylesheet contains malicious code, how would you do this?
  I know you can use style tags but what about stylesheets?</p>