且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

访问链接颜色不变在IE 8

更新时间:2023-12-03 09:28:40

:访问样式存在安全问题。



简要描述一下,恶意网站可能通过链接到所有要检查的网站来查找您访问的网站,然后只检查这些链接的颜色。



这个问题在三年前得到了大量的宣传,结果IE和所有其他浏览器发布了禁用的补丁:访问了样式。



我找不到特定于IE的链接,但这里有一个来自Mozilla 在Firefox 中描述问题及其解决方案。 / p>

旧版浏览器(IE6,IE7)仍然支持:visited 样式,但IE8和所有其他当前浏览器不是。



其中一些支持它作为用户可配置的选项,但默认关闭,但很少有用户将其打开,所以你可以基本上忽略它。



最近,一些浏览器重新启用了风格,但改变了Javascript getComputedStyle()函数,使其忽略访问样式。这允许最终用户看到访问的颜色,但防止黑客找到信息的可能性。我不认为IE8有这个更新。


I am having a problem with IE 8 where the visited links color do not change in our application.

We don’t have this problem with IE6. When using IE6, visited links changes its color if the link has been viewed before. Our application works fine with IE6 but with IE8 the visited link do not changes its color.

For information, I have cleared the history , unchecked the option "use Windows Colors" in the browser option. But the links in our application always remain unvisited.

Here is the CSS:

a:link {
    color : #006000;
}

a:visited {
    color : #3CB371;
}

Any help and suggestions would be greatly appreciated.

There is a security issue with the :visited style.

To describe it briefly, it is possible for a malicious site to find out what sites you've visited by having links to all the sites it wants to check for, and then just examining the colours of those links.

This issue got a lot of publicity about three years ago, and as a result IE and all the other browsers released patches that disabled the :visited style.

I couldn't find a link that was specific to IE, but here's a link from Mozilla describing the problem and their solution for it in Firefox.

Older browsers (IE6, IE7) will still support the :visited style, but IE8 and all other current browsers do not.

Some of them do support it as a user-configurable option, but defaulting to switched off, but very few users will have switched it on, so you can basically ignore that.

More recently, some browsers have re-enabled the style, but changed the Javascript getComputedStyle() function so that it ignores the visited style. This allows the end user to see the visited colour but prevents the potential for a hacker to find out the information. I don't think IE8 ever got this update.