How I recorded user behaviour on my competitor’s websites

Re:How I recorded user behaviour on my competitor’s websites by Xeanort on Thursday August 23, 2018 @04:49PM (#17830599)

You are right that they cannot be added to History, but the code used here changes the back button functionality with

  $(window).on('popstate', function() {
    window.location.href = 'https://example.com';
  });

I just tested it and it works with different domain in latest Firefox.

[ Parent | on HN ]

Re:How I recorded user behaviour on my competitor’s websites by Ajedi32 on Thursday August 23, 2018 @05:05PM (#17830706)

Fair point; popstate allows you to do pretty much anything when the history entry is for the current domain.

That's not really an issue for this particular attack though, which relies on the reverse scenario: the user remaining on the current domain when they expected to navigate back to the third party search engine.

[ Parent | on HN ]