Sniffing browser history using HSTS and CSP
github.com