Simon Willison’s Weblog

Jeremiah Grossman: I know who your name, where you work, and live. Appalling unfixed vulnerability in Safari 4 and 5 —if you have the “AutoFill web forms using info from my Address Book card” feature enabled (it’s on by default) malicious JavaScript on any site can steal your name, company, state and e-mail address—and would be able to get your phone number too if there wasn’t a bug involving strings that start with a number. The temporary fix is to disable that preference.

# 22nd July 2010, 8:44 am / apple, autocomplete, browsers, exploit, safari, security, vulnerability, recovered

CSS Transforms. WebKit can now do transforms (scale, rotate, translate and skew) in CSS via a new -webkit-transform property. Transforms behave like position relative in that they don’t affect the layout of the page. You can also provide a full affine transform matrix as a shortcut.

# 26th October 2007, 9:45 pm / affinetransformation, apple, browsers, css, graphics, matrix, safari, transforms, webkit

WebKit Does HTML5 Client-side Database Storage. SQLite strikes again. The WebKit team have included a neat update to their Web Inspector that lets you browse and modify your client-side databases.

# 20th October 2007, 12:03 pm / apple, html5, offline, safari, sqlite, webinspector, webkit, whatwg

Safari Beta 3.0.1 for Windows. A nice fast turnaround on fixes for security flaws in the beta.

# 14th June 2007, 9:56 am / apple, patch, safari, security

Safari for Windows, 0day exploit in 2 hours (via) Once again, down to handling of alternative URL protocol schemes.

# 12th June 2007, 1:30 pm / 0day, apple, safari, security, windows

Enabling the debug menu on Safari for Windows. “Turn off site-specific hacks” is one of the menu options.

# 12th June 2007, 1:18 pm / apple, browsers, safari, safari3, windows

Safari 3 Public Beta. Safari for Windows. Unfortunately this kills the best excuse corporate Web developers had for getting Macs (“we need to run all our supported browsers on one machine”).

# 11th June 2007, 11:06 pm / apple, safari, windows