You understand that it's an exploit that takes advantage of the browser's CSS :visited pseudoclass right? The JavaScript history object is specifically designe

You understand that it's an exploit that takes advantage of the browser's CSS :visited pseudoclass right? The JavaScript history object is specifically designed not to give 3rd parties access to your history info...