4 ms·

I've known about it since I encountered javascript.history.back(). I figured if js could find out my last page, then it could probably read my entire history. S

I've known about it since I encountered javascript.history.back(). I figured if js could find out my last page, then it could probably read my entire history. Since then my browser does not have any history saved. Edit: I've never really thought of it as an exploit though.

aarongough 17y ago
You understand that it's an exploit that takes advantage of the browser's CSS :visited pseudoclass right? The JavaScript history object is specifically designed not to give 3rd parties access to your history info...