HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
fingerprintjs
external-protocol-flooding
TypeScript2021–2021
fingerprintjs / external-protocol-flooding · Archived

external-protocol-flooding

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

3Distinct people
5Mentions
0Explicit recommenders
641GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Scheme flooding vulnerability: how it works and why it is a threat to anonymous browsing

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by hour5 dated mentions

Observed mentions: 2021-05-13 20:43:53 UTC to 2021-05-13 21:54:52 UTC.

012342021-05-13 20:00:00 UTC to 2021-05-13 21:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 commentsMay 13, 20:002021-05-13 21:00:00 UTC to 2021-05-13 22:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 commentsMay 13, 21:00

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
May 13, 20:002021-05-13 20:00:00 UTC2021-05-13 21:00:00 UTC101
May 13, 21:002021-05-13 21:00:00 UTC2021-05-13 22:00:00 UTC404

What Hacker News says

5 sources
Does this actually work correctly for anyone? Got wrong results for Firefox and Chrome on Linux (it warns that Chrome probably won't work). I glanced through the source[0] and my about:config and I noticed I have the dom.block_external_protocol_in_iframes setting enabled. Looks like this could be the mechanism they use? I don't remember enabling it manually. Otherwise, it could be my tiling window manager messing with detection. [0]: https://github.com/fingerprintjs/external-protocol-flooding/...
In Vulnerability allows cross-browser tracking in Chrome, Firefox, Safari, and Tor

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.