3 ms·
Brilliant. getComputedStyle used to give away the color of a link, so at some time this attack was trivial: you didn't need any user input, as a blue link meant
by cissou 12y ago
Brilliant. getComputedStyle used to give away the color of a link, so at some time this attack was trivial: you didn't need any user input, as a blue link meant :unvisited, and a purple one meant :visited.
Replacing getComputedStyle with user input ("is this letter black or transparent?") is definitely brilliant.
- aaronm67 12y agoThere was a pretty interesting talk about using differences in style render time to get history. https://www.youtube.com/watch?v=KcOQfYlyIqw https://www.youtube.com/watch?v=KcOQfYlyIqw It's pretty interesting, and can be done in a way that doesn't require any user input.