demo · v132

Partitioned :visited — triple-key explorer

Enter the click context (top-level site + frame origin) and the link URL. The page shows the triple-key Chrome stores. Two clicks with different triple-keys produce two different :visited entries — sniffing cross-site history no longer works.

scenario: a click that recorded the visit

scenario: a different page styling the same link

derived triple-keys

stored key—
attempt key—
—

simulated rendering of the link on the attacker page:

link to /article-42

see also