Description
Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.
References
- 20020911 Privacy leak in mozilla mailing-list
- RHSA-2003:046 vendor-advisory
- mozilla-onunload-url-leak(10084) vdb-entry
- 5694 vdb-entry
- MDKSA-2002:075 vendor-advisory
- http://bugzilla.mozilla.org/show_bug.cgi?id=145579
- RHSA-2002:192 vendor-advisory