Web Hack List

Collected research

Stealing Search Engine Queries with JavaScript

SPI Labs research brief describing JavaScript plus CSS that detects which search queries a visitor has previously run on arbitrary search engines, by testing the visited state of constructed result URLs. Any page, or any XSS on one, can profile every visitor's search history. This landing page is an abstract only; the full paper is a separate PDF.

Record

Published by
spidynamics.com
Topic
Server

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of spidynamics.com, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .