Collected research

Leaking Browser URL/Protocol Handlers

Rotem Kerner · Fortinet · 3 December 2020

Detects installed custom URL handlers from a web page through browser-dependent side effects. Broken-image dimensions expose handler presence in Firefox, while focus and modal-dialog behavior provide a signal in Chromium-based browsers; redirects allow repeated cross-origin tests.

Record

Researcher

Rotem Kerner

Published by

Fortinet

Date

3 December 2020

In the archive

• Collected in the 2020 research round

Tags

• xsleak
• side-channel
• detection
• url-parsing
• browser
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Rotem Kerner, first published at the original source. Preserved copies are kept so the citation survives its host.