from Hacker News

Spyjax: Using a:visited to test your history (2007)

by diamondhead on 12/3/11, 9:23 PM with 2 comments

• by joshfraser on 12/3/11, 9:57 PM

  Spyjax doesn't work in modern browsers anymore after all the major vendors plugged the hole. That's why people are resorting to the timing method instead.

• by mike-cardwell on 12/3/11, 11:03 PM

  This trick still works:

  https://grepular.com/Abusing_HTTP_Status_Codes_to_Expose_Pri...

  Although, the Google test on that particular page is currently not working.