473,701 Members | 2,728 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Determining the state of a link

Is there any to tell via javascript the "state" of a link? I mean, I'd
like to be able to tell if a link has been followed or not.

(hehe, I can hear shrill crys of "privacy!" in the distance...)

Jul 23 '05 #1
13 1520
Lee
Razzbar said:

Is there any to tell via javascript the "state" of a link? I mean, I'd
like to be able to tell if a link has been followed or not.

(hehe, I can hear shrill crys of "privacy!" in the distance...)


Fortunately, browser authors generally have more respect for those
"shrill cries" than you do, so no, you can't fill a page with links
to porn sites and build up a database of which I've visited.

Jul 23 '05 #2
Lee wrote:
Fortunately, browser authors generally have more respect for those
"shrill cries" than you do, so no, you can't fill a page with links
to porn sites and build up a database of which I've visited.


On the contrary, it most certainly can be done, for a subset of users with
browsers which support CSS and the necessary scripting capabilities.

See: http://www.mattkruse.com/temp/link_check.html

This is, as far as I'm concerned, a privacy vulnerability.

I could easily add a script to a site which checks hundreds of URLs to
"profile" my visitors without their knowledge, and submit that data back to
the server for storage and analysis.

--
Matt Kruse
http://www.JavascriptToolbox.com
Jul 23 '05 #3
"Matt Kruse" <ne********@mat tkruse.com> writes:
On the contrary, it most certainly can be done, for a subset of users with
browsers which support CSS and the necessary scripting capabilities.

See: http://www.mattkruse.com/temp/link_check.html
Ingenious.
This is, as far as I'm concerned, a privacy vulnerability.


At least it seems Opera 8 is not affected. It always returns the color
of a non-visited link. It works for both IE and FireFox, though, and
I agree it's a privacy vulnerability worth reporting.

/L
--
Lasse Reichstein Nielsen - lr*@hotpop.com
DHTML Death Colors: <URL:http://www.infimum.dk/HTML/rasterTriangleD OM.html>
'Faith without judgement merely degrades the spirit divine.'
Jul 23 '05 #4
Lasse Reichstein Nielsen wrote:
[...]
At least it seems Opera 8 is not affected. It always returns the color
of a non-visited link. It works for both IE and FireFox, though, and
I agree it's a privacy vulnerability worth reporting.


Well, it doesn't work for me, and I use Firefox 1.0.2 on Linux...

--
+- David Given --McQ-+
| dg@cowlark.com | "The README of fate is a complex program indeed."
| (dg@tao-group.com) | --- Reboot
+- www.cowlark.com --+

Jul 23 '05 #5
"Lasse Reichstein Nielsen" <lr*@hotpop.com > wrote in message
news:8y******** **@hotpop.com.. .
"Matt Kruse" <ne********@mat tkruse.com> writes:
On the contrary, it most certainly can be done, for a subset of users
with
browsers which support CSS and the necessary scripting capabilities.

See: http://www.mattkruse.com/temp/link_check.html


Ingenious.
This is, as far as I'm concerned, a privacy vulnerability.


At least it seems Opera 8 is not affected. It always returns the color
of a non-visited link. It works for both IE and FireFox, though, and
I agree it's a privacy vulnerability worth reporting.


Maybe it's time to start using a user defined stylesheet. Create a file
called userContent.css , put it in your Gecko-based browser's
{profile}/chrome directory (Documents and Settings\<user> \Application
Data\Mozilla\Fi refox\Profiles\ default.xyz\chr ome in Windows 2000 and
Windows XP). Make sure userContent.css contains:

a{ color: Blue ! important; }
a:visited { color: Red ! important; }

In IE:
- Tools > Internet Options > General tab > Accessibility
- Check User style sheet
- Browse for userContent.css

The above methods appears to work in IE, even if the site author
includes ! important in his CSS for links. I didn't test it in Firefox.

Actually, I'm not that paranoid, but for those that are, there appears
to be a way to mitigate the privacy issues without having to switch
browsers.

--
Grant Wagner <gw*****@agrico reunited.com>
comp.lang.javas cript FAQ - http://jibbering.com/faq
Jul 23 '05 #6
Grant Wagner wrote:
Actually, I'm not that paranoid, but for those that are, there appears
to be a way to mitigate the privacy issues without having to switch
browsers.


Yeah, I don't think it's that big of a deal. The potential exploits would be
complicated and really not that big of a deal anyway. It's more of a
curiosity than a real concern, for me.

Possible 'exploits' might include:

- Checking popular banking sites to see which bank the user might use

- Checking weather.com URLs for every zip code and possibly finding out the
zip code of the user

- Checking competitor URLs to see if the user has been there recently, and
displaying targetted advertising based on that fact.

- When displaying ads, checking to see if the user has already clicked on
the ad. If they have, display a different one instead.

etc.

I was wondering if there was a way to form URL's that would point to objects
on the filesystem in IE. For example, a URL that points to Excel. By
checking that, you could tell if the user has Excel installed in that
location. But, I don't think people run stuff from within IE. I didn't know
what else along the same lines might be possible.

To me, the "fix" would seem to be that browsers never report the styles
applied by :visited styles. Instead, fall back to the default style for the
<a> tag. That might be complicated, though, and I don't think it would be
high on anyone's priority list.

--
Matt Kruse
http://www.JavascriptToolbox.com
Jul 23 '05 #7


Lee wrote:
Razzbar said:

Is there any to tell via javascript the "state" of a link? I mean, I'd
like to be able to tell if a link has been followed or not.

(hehe, I can hear shrill crys of "privacy!" in the distance...)


Fortunately, browser authors generally have more respect for those
"shrill cries" than you do, so no, you can't fill a page with links
to porn sites and build up a database of which I've visited.


Maybe that's what YOU would do, jerk.. shows what's on YOUR mind.

My purpose, not that it's any of your business, was to allow the user
to clean up a page by moving their followed links to another area of
the page.

So take your insulting insinuation and shove it.

Jul 23 '05 #8


Matt Kruse wrote:
See: http://www.mattkruse.com/temp/link_check.html

This is, as far as I'm concerned, a privacy vulnerability.
Wow, that was scary. Had me fooled for a second, too, because the
followed links appeared no different from the followed ones. Someone
could make the link text very tiny, and hundreds of links could go
unnoticed. The only problem would be in getting the visitor to submit
them.
I could easily add a script to a site which checks hundreds of URLs to
"profile" my visitors without their knowledge, and submit that data back to
the server for storage and analysis.


I knew there could be a privacy issue, and now I'm wondering how to
protect against it, without having to keep clearing the browser
history.

I just wanted to move links from one part of the page to another.
Really.

Jul 23 '05 #9


Matt Kruse wrote:
To me, the "fix" would seem to be that browsers never report the styles
applied by :visited styles. Instead, fall back to the default style for the
<a> tag. That might be complicated, though, and I don't think it would be
high on anyone's priority list.


There could be a browser security setting that would "forget" the
followed status of a link to all sites except the originating one. For
other sites, a tool tip could indicate the followed status.

It's useful to see which links you've followed. I wanted a way to to
actually move them out of the way, or off the page, if the user wanted
to.

Jul 23 '05 #10

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

12
3655
by: Cliff Wells | last post by:
Hi, I'm writing an application that needs to know if an Internet connection is available. Basically, I want to have something similar to what a lot of email clients have, where the app can work either in "online" or "offline" mode (it keeps a cache of downloaded info, so it can work without a connection if needed). The basic problem is this: it downloads info (RSS feeds) from a variety of sources. Any one (or more) of these could...
1
3563
by: Tristan Miller | last post by:
Greetings. I am trying to write a function which toggles the display of a certain class of <div> elements in an HTML page. The CSS file initially sets some classes to "display: none", and others to "display: block". The problem I am encountering is that when the JavaScript interpreter starts up initially, all style.displays are null. Thus the following code is not effective: function toggleAll(itemname) {
5
1929
by: ~greg | last post by:
I have links on an index page like this: <a href="link" onclick="DoOnClick('link')"> page title </a> -where the DoOnClick("link") just adds a query part to the url before executing: location.href = "link?query"; ( this is done in order to maintain certain state information
18
4927
by: Robert | last post by:
Hi! I was wondering if the was any way to determine the state of the caps lock key, on or off. Of course I can capture the key events and see whether the caps lock is pressed, but that does not help. I have seen some example that looks at the characters entered in an input field to determine if the caps lock is on, but I was wondering if something is possible that is a bit more immediate to report the caps
7
2129
by: Jean-David Beyer | last post by:
I have six hard drives (4 SCSI and 2 EIDE) on my main machine with parts of a database on each drive. The main index is on one SCSI drive all to itself. The main data are on the other three SCSI drives. Small relations are on one EIDE drive, and the logfiles are on the other EIDE drive. When running the task, below, the rest of the machine is not doing much. I do not remember where I saw it, but somewhere I got the idea that the number...
2
2251
by: Elad | last post by:
Hi, Is there a way of determining whether a Mutex is signaled or not without using Mutex.WaitOne() which blocks the thread if the Mutex currently has an owner? Thanks.
2
2112
by: Ivers | last post by:
My C# asp.net app (.NET 1.1) can generate an email whose body contains a link to the current page of the app. When the recipient of the email clicks the link (usually from Outlook), the app launches just fine, and will postback great too. However, when the user pastes this link into a PowerPoint 2003 hyperlink, runs the slideshow, and clicks on the link, it brings up the right page, but generates the error "Object reference not set to...
10
1632
by: Peter Olcott | last post by:
Someone told me that determining the exact location and current state of any JavaScript controls is pretty easy. Does anyone know exactly how this is done?
1
1821
by: Jeff | last post by:
I need to place a "Previous Page" link on every page within my site and a simple javascript:history.back() will not work because I need it to capture the state of the page when I left it. For example, if I have a page with some date controls so I can choose a date range and postback the page. It then displays results based on that date range. When I leave the page for another page, I would like to have the Previous Page link take them...
0
9232
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
0
9084
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
8978
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
8936
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
6573
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4411
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
0
4665
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
3104
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
2399
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.