I've found that the two methods you described work, e.g. using HTML such as this:
<html>
<link rel="stylesheet" type="text/css" href="ascii.css">
<span>If this text is orange and an alert appears, the obfuscated JS in the CSS was evaluated</span>
</html>
I've found that the two methods you described work, e.g. using HTML such as this:
<html>
<link rel="stylesheet" type="text/css" href="ascii.css">
<span>If this text is orange and an alert appears, the obfuscated JS in the CSS was evaluated</span>
</html>
and a CSS file like this:
---ascii.cs...
[ more ]