News for hackers. Stuff that matters.
Re:Try and view the source by bri3d on Monday March 19, 2012 @12:53AM (#3722374)
A clever use of history.replaceState and some special characters (to make it less obvious that the state's been altered) - "view source" in Chrome operates on the currently active URL, which after the replaceState has executed is the "not that easily" page.

You can also reproduce the behavior by navigating back, then forwards again - you'll see the "not that easily" page that way, as well (as the "try and view the source" page has been replaced in your history list).

Re:Try and view the source by adamkhrona on Monday March 19, 2012 @01:38AM (#3722529)
Just to add to this, the "special characters" are "%E2%80%AE" which is the escaped form of the UTF-8 "Right-To-Left Override" control character (which effectively reverses the display of text).

If you try copying the URL to plain-text, you'll see: http://www.kurlak.com/john/%E2%80%AElmth.ecruos

Re:Try and view the source by sixcorners on Monday March 19, 2012 @05:57AM (#3723159)
Why is this possible? Is there a way to surpress this weirdness? I want to be able to trust my address bar again.
Re:Try and view the source by tomp on Monday March 19, 2012 @06:35AM (#3723259)
I believe that RTL character is one of the main failures of UNICODE. This should be part of the markup / rich text, not part of the plain text.
Re:Try and view the source by sesqu on Monday March 19, 2012 @08:23AM (#3723561)
Even without the RTL directive, they might have used something like sourcе.html — which contains a non-ASCII glyph. So while RTL is problematic, I'm not prepared to call it a failure in that generally problematic space of unifying human communication.
Re:Try and view the source by Papirola on Monday March 19, 2012 @11:31AM (#3724353)
I use it when I write Hebrew mixed with English...