Closed
Bug 520974
Opened 15 years ago
Closed 15 years ago
Firefox history can be sniffed with simple css :visited background images
Categories
(Firefox :: Security, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 147777
People
(Reporter: arne_bab, Unassigned)
References
()
Details
User-Agent: Mozilla/5.0 (compatible; Konqueror/4.3; Linux) KHTML/4.3.1 (like Gecko)
Build Identifier:
By setting a :visited background image, the firefox history can be sniffed easily. I was curious how easy it is and managed to write a history sniffer in just 64 lines of Python (see the URL), so you really might want to fix the issue quickly.
Please remove the optimization of only loading required css data based on the visited info!
I didn't find my original bug report, so I add this one with more backup: To load anything depending on the state of the history exposes private information.
Reproducible: Always
Updated•15 years ago
|
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
You need to log in
before you can comment on or make changes to this bug.
Description
•