3 ms·
Good. I've been advocating for this since publishing a history-leaking attack on Chrome's shared bytecode cache, which also doesn't rely on the network (CVE-201
by mintplant 7y ago
Good. I've been advocating for this since publishing a history-leaking attack on Chrome's shared bytecode cache, which also doesn't rely on the network (CVE-2019-13684 - see page 8 of [0]). Would also like to see this applied to visited link state eventually. Shared state between origins inevitably leads to information leaks.
[0] https://www.spinda.net/papers/smith-2018-revisited.pdf https://www.spinda.net/papers/smith-2018-revisited.pdf
- Andrex 7y agoI've wondered about visited link states for a while, and I could easily see them getting focused on soon as well.