4 ms·
known about it and different forms of it for a while. i wouldn't really call it an exploit in and of itself, though, as you can pull the information out of the
by noodle 17y ago
known about it and different forms of it for a while.
i wouldn't really call it an exploit in and of itself, though, as you can pull the information out of the css :visited pseudoclass in a variety of ways. i'd call it an unintended consequence.
- aarongough 17y agoFair enough, an unintended consequence with a plethora of uses for the evil and not-so-evil alike though... I feel like a little bit of a failure at the moment! My only solace is that I wasn't active in the web-development (or software at all) industry when the 'exploit' was released to the wild. I guess you can't catch everything!
- noodle 17y agoyou'd have to go back to html 3.0 in 1997 when the vlink property was introduced to the body tag. that would be the origin of being able to specifically color links you've visited, allowing you to set a bizarre color to visited links and let javascript traverse the dom to find links that are colored weirdly.
- aarongough 17y agoI wasn't anywhere near the industry by that point. I got my professional start in 2002... Long enough to remember the 'bad old days' though!