TLDR InfoSec · ATTACKS & VULNERABILITIES

GOOGLE CHROME FIXES BROWSER HISTORY LEAKS BY PURPLE “VISITED” LINKS

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Historically, bad actors have been able to track users' browsing history by utilizing the ":visited" CSS selector, which turns links purple. Google is aiming to address this leak by changing the way that the ":visited" selector is applied to only display if the user has visited the site from the current top-level site and frame origin. Effectively, the browser will now display purple links based on the combination of the current site and visited sites.