Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A new spam policy for “back button hijacking”

developers.google.com

Post reply on HN
Print view View original

401–410 of 532 posts

Re: A new spam policy for “back button hijacking”

#401

Post by pfg_ »

merelysounds wrote: post #393

Looks like there is also a client side solution for that, at least in Firefox; it's possible to prevent a page from modifying browser history: > Open the about:config page in Firefox > Search for "pushstate" > Double-click "browser.history.allowPushState" source: https://superuser.com/a/1688290

Usually when I see this from non-spam sites, it's not even pushstate, it's just some page that redirects as soon as it loads. So you press back twice and it goes back -> forwards -> back -> forwards. Disabling pushstate doesn't fix that, it just makes pushstate equivalent to a redirect.

Re: A new spam policy for “back button hijacking”

#402

Post by qup »

kule wrote: post #395
rat_on_the_run wrote: post #383

I wish the browsers had a function of disabling all keyboard shortcuts of a website. I binded Ctrl+E to opening a new tab just beside the current tab (built-in hotkey in Brave). It's frustrating to see it changed to something like opening the emoji menu on Discord.

Looking at you ctrl+r in web outlook...I want to reload the page not reply to the email!

Try ctrl shift r

Re: A new spam policy for “back button hijacking”

#403

Post by nemomarx »

embedding-shape wrote: post #391
hacker161 wrote: post #372

Earlier quoted context omitted.

“Borderline unusable” is such a hyperbolic way to describe a fully functional design that doesn’t happen to be responsive. Hacker News must be borderline unusable for you as well then, no?

> Hacker News must be borderline unusable for you as well then, no? On my phone? Yes, absolutely, impossible to hit the links correctly even if I zoom in. Both old reddit and HN is "Fully functional" on desktop, agree, but far cry from "fully functional" on my arguably tiny iPhone.

Is that a ios browser difference? I browse hn all the time on my android phone and I didn't think my screen was unusually big. Maybe they implement some different scaling?

Re: A new spam policy for “back button hijacking”

#404

Post by charcircuit »

themafia wrote: post #64
domenicd wrote: post #35

Earlier quoted context omitted.

We tried a few times. We got as far as gating the ability to push into the "real history stack" [1] behind a user activation (e.g. click). But, it's easy to get the user to click somewhere: just throw up a cookie banner or an "expand to see full article" or similar. We weren't really able to figure out any technical solution beyond this. It would rely on some sort of classification of clicks as leading to "real" same…

The back button itself feels overloaded. There's "go to previous state" and then there's "go to previous origin." In an ideal world when I doubleclick on the back button what I mean is: "get me off of this site, now."

I agree. It may also require some extra work to figure out what the correct previous origin was, but this will also help legitimate cases where sites send you through 10 different redirects before you get to an actual site (looking at you Microsoft login).

Re: A new spam policy for “back button hijacking”

#405

Post by knollimar »

mx7zysuj4xew wrote: post #399
csomar wrote: post #105

Earlier quoted context omitted.

This relates to Chrome, not to search. In regard to search, they have taken a new direction that I don't think is going to change any time soon. Some time in the last 2 years, they started removing any thing that doesn't get significant natural traffic (ie: have a 30 year old user manual for something odd that people only search for once in a while? -> removed). Last few months, I noticed that they will not index any…

What aggravates me is that somewhere at Google headquarters some asshole thinks he's a fucking genius for turning the web into nerfed walled garden

KPI go up and pats on the back all around

Re: A new spam policy for “back button hijacking”

#406

Post by SuperNinKenDo »

Tepix wrote: post #46
SuperNinKenDo wrote: post #28

Earlier quoted context omitted.

Happened to me yesterday through a link off here. I was already expecting it given the domain, but usually mashing back fast enough does the trick eventually. Not this time. Had to kill the tab.

In most browsers you can hold the back button for a second and it will let you skip back more than one step.

Probably should have mentioned it, but I was on my phone browser where that option either doesn't exist or isn't surfaced well. A long press on the back button just does the same thing as tapping once, so I'm all out of ideas.

Re: A new spam policy for “back button hijacking”

#407

Post by chmod775 »

pfg_ wrote: post #401
merelysounds wrote: post #393

Looks like there is also a client side solution for that, at least in Firefox; it's possible to prevent a page from modifying browser history: > Open the about:config page in Firefox > Search for "pushstate" > Double-click "browser.history.allowPushState" source: https://superuser.com/a/1688290

Usually when I see this from non-spam sites, it's not even pushstate, it's just some page that redirects as soon as it loads. So you press back twice and it goes back -> forwards -> back -> forwards. Disabling pushstate doesn't fix that, it just makes pushstate equivalent to a redirect.

I haven't had that problem in a while. Did browser vendors already do something about it?

Re: A new spam policy for “back button hijacking”

#408

Post by SuperNinKenDo »

Kab1r wrote: post #53
Tepix wrote: post #46

Earlier quoted context omitted.

In most browsers you can hold the back button for a second and it will let you skip back more than one step.

And some websites consume the entire history that a browser displays in that menu

Has definitely happened to me. Especially if I try the "click back a couple times quickly" method first.

Re: A new spam policy for “back button hijacking”

#410

Post by igor47 »

rat_on_the_run wrote: post #383

I wish the browsers had a function of disabling all keyboard shortcuts of a website. I binded Ctrl+E to opening a new tab just beside the current tab (built-in hotkey in Brave). It's frustrating to see it changed to something like opening the emoji menu on Discord.

I use vimium in Firefox and so my default key bindings are the plug-in ones. I push 't' to create a new tab, for instance. If I want to use the website key bindings I have to to into "insert mode" ('i'), or I opt into specific keys by site.

I do like when websites use ctrl-k -- it means nothing to my plug-in so websites always get it, plus it helps with key binding discovery.

Post reply on HN