4 ms·
Hovering the link to check the URL is a good old trick. Well until browsers start to hide that as well.
by tdkl 11y ago
Hovering the link to check the URL is a good old trick. Well until browsers start to hide that as well.
- Piskvorrr 11y agoNice try, but no, that's a broken old trick. window.status is gone for exactly this reason, but things like onclick="this.href=http://evilsite.example/" http://evilsite.example/" (or even onclick="window.location=http://somewhereelse.evil.example/;return http://somewhereelse.evil.example/;return false") still work (link shows a benign location, but it's changed to a malicious one when you click).