4 ms·
The related issue most irritating for me is that google search makes the URL hover claim one destination but when you click the click itself rewrites the URL to
by nullc 6y ago
The related issue most irritating for me is that google search makes the URL hover claim one destination but when you click the click itself rewrites the URL to funnel through their tracking service.
This is an extremely dangerous attack vector which google is abusing to compromise user privacy (but fortunately, not worse). There was a firefox bug open on this for years but it seems like Mozilla really didn't want to break their big sponsor's analytics. ( https://bugzilla.mozilla.org/show_bug.cgi?id=229050 https://bugzilla.mozilla.org/show_bug.cgi?id=229050 )
I find it extremely annoying because I often search for PDFs to answer questions for people and if I click the link it pops up in an external viewer and I get no opportunity to copy a url. Unfortunately the right-click to copy also triggers the onclick handler to add the google tracking spam, causing me to copy an extremely long and chat-unfriendly URL.
- a1369209993 6y agoFWIW, NoScript fixes this, since the clickjacking malware can't run by default.
- scoutt 6y agoI know. You have to set the browser to ask what to do for every download. Then you download the PDF. After that go to "downloads" and right-click and select "copy source URL" or something like that. That's the only way I've found to get the real URL.
- em-bee 6y agowhy not display the pdf in the browser? that keeps the url in the address bar
- scoutt 6y agoSome sites make you download the PDF instead of showing it in the browser. The new tab opens and closes immediately after fetching the URL, so you don't get to see the URL in the bar. If the browser is set to open files with known editors, it will be downloaded and opened (and I can't recall if the PDF is still in the download list in the browser). Edit: I work with datasheets. The following link forces me to download the PDF: https://www.st.com/resource/en/datasheet/stm32f103rc.pdf https://www.st.com/resource/en/datasheet/stm32f103rc.pdf This does not: https://www.mouser.it/datasheet/2/389/stm32f103rg-1851026.pdf https://www.mouser.it/datasheet/2/389/stm32f103rg-1851026.pd... Don't ask me why....
- jhomedall 6y agoThis is typically due to the `Content-Disposition` HTTP header (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Disposition https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...).
- saagarjha 6y ago(DuckDuckGo doesn’t do this, which is one of the minor reasons why I use it.)
- _qulr 6y agoI recently discovered that DDG does clickjacking too, albeit in a different way. My blog post: https://lapcatsoftware.com/articles/duckduckgo.html https://lapcatsoftware.com/articles/duckduckgo.html