6 ms·
Revealing the content of the address bar in IE
- kevcampb 9y ago"Turn off suggestions (stop sending keystrokes to Bing)" It's right there under where you were typing Nothing to see here folks
- yew 9y agoWhy do you think Microsoft implemented Bing suggestions by setting the window.location property? It seems an odd choice...
- joshribakoff 9y agoThe issue isn't that keystrokes are sent to bing, the article says they are sent to other sites other than bing. That is a legit security issue
- vortico 9y agoThat's not the security vulnerability this article is talking about. The pages in iframes get live access of the URL in the address bar at all times, which can effectively send your search queries to whoever even with search suggestions disabled.
- larkeith 9y agoCorrection: Pages in <object> tags, not iframes
- elaus 9y agoI'm always confused by comments like these - they seem almost intentionally misleading, but of course it could also be just a mistake while quickly scanning an article.
- kevcampb 9y agoI misread from the images. Should have slowed down and thought twice before posting that. Annoyingly was too late to put an edit in my reply. Apologies.
- dang 9y agoUrl changed from https://arstechnica.com/information-technology/2017/09/bug-in-fully-patched-internet-explorer-leaks-text-in-address-bar/ https://arstechnica.com/information-technology/2017/09/bug-i..., which points to this.
- vortico 9y agoWow, this is pretty significant. Does it work on all recent versions of IE?