Intent to prototype and ship: Make <link> elements not traversable
Skip to first unread message
Emilio Cobos Álvarez
Feb 8, 2021, 6:49:43 PM2/8/21
Reply to author
Sign in to reply to author
Sign in to forward
You do not have permission to delete messages in this group
Report message as abuse
Sign in to report message as abuse
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
(I forgot to send an intent for this a couple weeks ago)
Summary: This is a bit of a mess, see . TLDR:
* Gecko treated <link> elements like anchors, in the sense that if you
display them, we allowed you to click around, etc. This meant also
supporting :link / :visited on them, and such. We stopped supporting
:visited on them a while back, because doing history queries for that
and expose more attack surface for timing attacks seems just bad.
* WebKit matched :link / :visited but didn't allow you to navigate
using them. They stopped matching :visited around the same time as we
* Blink at some point long time ago stopped matching :link / :visited
on <link> elements.
This change aligns us with Blink (and the updated HTML spec).