3 ms·
It's old and it's somewhat lame, but it is an attack. CSS and the DOM were designed not to allow this sort of information leak. They missed a spot.
by dfranke 17y ago
It's old and it's somewhat lame, but it is an attack. CSS and the DOM were designed not to allow this sort of information leak. They missed a spot.
- ubernostrum 17y agoThe problem, of course, is how to solve this without neutering both CSS and the DOM in the process.
- taitems 17y agoMaybe :visited should not apply to cross domain links.