3 ms·
I didn't know you could not check if a link is blue or purple with javascript. I assume you can't do it through standard means. What about this css hack? https:
by byte1918 8y ago
I didn't know you could not check if a link is blue or purple with javascript. I assume you can't do it through standard means. What about this css hack? https://github.com/maxchehab/CSS-Keylogging https://github.com/maxchehab/CSS-Keylogging Wouldn't using a selector like a:visited { background-image: url-to-tracking-image }? You can apply this with JS and check the href, although you can do that with CSS as well.
- btown 8y agoMany browsers have specifically disabled background-image, or anything with side effects, on :visited selectors - https://hacks.mozilla.org/2010/03/privacy-related-changes-coming-to-css-vistited/ https://hacks.mozilla.org/2010/03/privacy-related-changes-co... You can still trick users into clicking on overlays on top of visited links (e.g. with a fake captcha that says "click all the things that are purple"). But because this requires manual actions, it's less critical than something like the session resumption attack above, which could run all night and enumerate the RTT of every single banking site and niche mature-content site out there.