LWN.net Logo

Advertisement

Front, Kernel, Security, Distributions, Development. See your byline here on LWN.net.

Advertise here

Leaking browser history

Leaking browser history

Posted Jun 26, 2008 8:52 UTC (Thu) by jamesh (subscriber, #1159)
In reply to: Leaking browser history by jhs
Parent article: Leaking browser history

It depends on what the you consider to be privacy-leaking functions.

If the CSS visited handling remains intact, getComputedStyle() is not the only way to get at
the information.  If you specify a different font size for visited links, then the dimensions
of any parent element will leak the information.

Displaying all links as non-visited is pretty much the only way of fixing the bug.  Applying
the browser's visited link colour when rendering while leaving the DOM as is might be an
option, but that leads to accessibility problems for sites that change font/background colours
(i.e. almost every site).


(Log in to post comments)

Leaking browser history

Posted Jun 27, 2008 0:34 UTC (Fri) by wahern (subscriber, #37304) [Link]

Not all links. Just links outside the domain.

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds