3 ms·
Sure hope everyone got that css history hack fix.
by 83457 16y ago
Sure hope everyone got that css history hack fix.
- alanh 16y agoNot sure what you mean by ‘got the fix’ — wouldn’t the fix be completely disabling browser history?
- 83457 16y agoThere was a hack to see what pages someone visited. I see that they actually link to a page about that. The problem with that approach would seem to be that it is a cross-domain vulnerability so other domains could detect the history thus ever-cookie data. Not sure if they have some other mechanism for preventing this problem. I actually thought this problem had been resolved in some manner in many browsers but that doesn't appear to be the case.