4 ms·

It is old news, but CSS history 'browsing' can be used as an attack to find authz tokens in certain URLs.