A new exploit has revived an old bug to access the browser history http://ping.fm/bU1lA