History Theft With CSS Boolean Algebra

Michal Zalewski (via Hacker News): Up until mid-2010, any rogue website could get a good sense of your browsing habits by specifying a distinctive :visited pseudo-class, rendering thousands of interesting URLs off-screen, and then calling the getComputedStyle API to figure out which pages appear in your browser’s history. After some deliberation, browser vendors have closed … Continue reading History Theft With CSS Boolean Algebra