Before about 2010, the CSS
:visited selector allowed websites to uncover a user's browsing history and figure out what sites the user had visited. This was done through
window.getComputedStyle and other techniques. This process was quick to execute, and made it possible not only to determine where the user had been on the web, but could also be used to guess a lot of information about the user's identity.
To mitigate this problem, browsers have limited the amount of information that can be obtained from visited links.
To preserve users' privacy, Firefox and other browsers will lie to web applications under certain circumstances:
window.getComputedStylemethod, and similar functions such as
element.querySelector, will always return values indicating that a user has never visited any of the links on a page.
- If you use a sibling selector such as
:visited + span, the adjacent element (
spanin this example) will be styled as if the link were unvisited.
- In rare scenarios, if you're using nested link elements and the element being matched is different from the link whose presence in history is being tested, the element will be rendered as if the link were unvisited, as well.
You can style visited links, but there are limits to which styles you can use. Only the following styles can be applied to visited links:
border-color(and its sub-properties)
- The color parts of the
In addition, even for the above styles, you won't be able to change the transparency between unvisited and visited links, as you otherwise would be able to using the
alpha parameter to
hsl(), or the
Here is an example of how to use styles with the aforementioned restrictions:
outline: 1px dotted blue;
/* The default value of background-color is `transparent`. You need to
specify a different value, otherwise changes on :visited won't apply. */
outline-color: orange; /* Visited links have an orange outline */
background-color: green; /* Visited links have a green background */
color: yellow; /* Visited links have yellow colored text */
Overall, these restrictions shouldn't affect web developers too significantly. They may, however, require the following changes to existing sites:
- Using background images to style links based on whether they've been visited will no longer work, since only colors can be used to style visited links.
- Colors that are otherwise transparent will fail to appear if styled in a
- privacy-related changes coming to CSS :visited on Mozilla Hacks
- Plugging the CSS History Leak on the Mozilla Security Blog
- Preventing attacks on a user's history through CSS :visited selectors