FWIW, we have a tracking issue for this on GH: https://github.com/w3c/frame-timing/issues/40
On Mon, May 11, 2015 at 12:58 PM, Boris Zbarsky <bzbar...@mit.edu> wrote: > No, you can't. We explicitly forbid that, precisely because of > side-channel timing attacks. dbaron has a good writeup about how the > :visited mitigation works at http://dbaron.org/mozilla/visited-privacy > but the upshot is that in the above testcase the <a> will be display:none > whether it's visited or not. > Boris, any chance you can also take a look at scenario in: https://github.com/w3c/frame-timing/issues/40#issuecomment-97888895 Thanks! ig _______________________________________________ dev-platform mailing list dev-platform@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-platform
