The attack takes around ten seconds to carry out and can even work without the need of iframes or without a constant flow of traffic ... For example, the following CSS code will scan the page ...