• Synopsis: It's possible to get a somewhat detailed list of what websites a user has visited, using CSS to detect the status of a:visited.
• Mozilla bug #57351 has been open since October 2000 (note that current discussion has moved to bug #147777)
• demonstration sites
  • StartPanic.com
  • the no-javascript method
• using it for benevolent purposes
  • socialhistory.js
• workarounds / proposed fixes
  • SafeHistory (Firefox plugin) — apply the "same origin" policy to a:visited
  • in Firefox 3.5, you can set layout.css.visited_links_enabled to false