Printable View
Also present in Netscape 7.0 and Galeon. <sigh>......Quote:
The bug reveals the URL of the page a user is viewing to the Web server of the site visited last. This allows a Web server to track where users go after they leave the site, even if the next Web address comes from a bookmark or is manually typed into the browser.
http://news.zdnet.co.uk/story/0,,t269-s2122261,00.html
Demonstration of the vulnerability
Thank you for letting me know, I use mozilla from time to time. On the second link you gave I followed the instructions but I dont think it worked because I was expecting them to tell me what page I went to. However I use proxomitron and that was one of the sugestions at the bottom, so for proxomitron users who have enabled the filter to hide where you have been, should be ok.
Thyanks for the info.
There is now a simple fix for this problem. Create a user.js file in your Mozilla profile directory and add the line: user_pref("capability.policy.default.Window.onunload", "noAccess");
Thanks to the guys who worked this out for getting on it quickly. I would have posted this sooner, but I've had problems accessing the site for the last couple of days.
http://members.ping.de/~sven/mozbug/refcook.html (The site appears to be down at the moment, but the link is correct.)