2 ms·
Most people are just going to hit back until it looks like they're at the right site, so I don't think you'd have to change the previous history, just add your
by makomk 8y ago
Most people are just going to hit back until it looks like they're at the right site, so I don't think you'd have to change the previous history, just add your own entry after the one for the site they came from.
- paulryanrogers 8y agoThat would require storing where they came from as well as waiting for--or forcing--them to visit at least one more page on the attacker's site. So it'd still make backjacking harder. Maybe pages that immediately redirect on first arrival should also not count toward back history. Now a more perfect solution would require browsers snapshot where the user cane from then block or warn about pages at the destination that look too similar. Though that seems unnecessarily complex for most users.