basic wrote: > from what I know of the issue it is not a bug
Sure it is. The fact, if I visited a certain, different website is private. Leaking this info is a privacy bug. I think that the property exploited is even proprietatry (i.e. not part of the DOM spec). But even if it is, then the spec is buggy and should not be implemented in that case. Ben
