Closed Bug 1644415 Opened 6 years ago Closed 6 years ago

disclose a user web history

Categories

(Firefox :: Security, defect)

Product:
Firefox
Component:
Security
Type:
defect

Tracking

()

Status:
RESOLVED DUPLICATE of bug 1293420

People

(Reporter: u635660, Unassigned)

References

(
URL
)

Details

(Keywords: reporter-external, Whiteboard: [reporter-external] [client-bounty-form] [verif?])

steps to reproduce

go to cnn.com or amazon.com

and then go https://lcamtuf.coredump.cx/whack/
and then it tells you what website you visited
impact this could allow an attacker to view what websites you visited

tested on firefox for windows 10

Flags: sec-bounty?

Please tell me you don't actually expect us to pay you a bounty for linking to someone else's work, with no context or description of the issue, despite the fact that said work is public, and has been for 4-6 years depending on whether you count the footnote in an earlier post, described in detail at https://lcamtuf.blogspot.com/2016/08/css-mix-blend-mode-is-bad-for-keeping.html .

Also, please search for existing reports - I used the quicksearch query ALL mix-blend-mode and then scanned the results for things relating to history / privacy / links.

Group: firefox-core-security
Status: UNCONFIRMED → RESOLVED
Type: task → defect
Closed: 6 years ago
Resolution: --- → DUPLICATE
Flags: sec-bounty? → sec-bounty-
You need to log in before you can comment on or make changes to this bug.