Word detector checks for incorrect protocol

fingerprintjs / external-protocol-flooding

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

https://schemeflood.com

MIT License

644 stars 47 forks source link

Open ericlaw1979 opened 3 years ago

ericlaw1979 commented 3 years ago

On Windows, at least, the current version of Word registers for ms-word rather than word.

spalt08 commented 3 years ago

Good point. I also noticed open-word: and updateoffice: on my Mac.

However, I don't think I will change the demo since we don't have any reason to detect every app perfectly. It's just a PoC for a vulnerability.