On Wed, Sep 02, 2009 at 08:47:59PM +0000, corvid wrote:
Johannes wrote:
this http://wtikay.com/docs/details.html is quite interesting. Dillo is not vulnerable, but we should keep this in mind when implementing background image support.
Are background images the only way for them to pull that off?
The other way they describe uses Javascript. But it would also be possible to make links visible/invisible depending on whether the user has visited a site (see below). From what the user then clicks one might get a clue about his browser history. But this is not automatic and only one piece of history information per click. Cheers, Johannes <html> <head> <style type="text/css"> body {background-color: white} a {color: white} :visited #bad {color: red} :link #good {color: red} </style> <body> <a href="http://wikileaks.org"><a href="hevisitedwikileaks.html" id="bad">click here</a></a> <br/> <a href="http://wikileaks.org"><a href="heisok.html" id="good">click here</a></a> </body> </html>