Hacker News new | ask | show | jobs
by guraf 978 days ago
It doesn't share your cookies, that probably stops almost any leak. Then probably rules to filter out legacy ?sessid= ?sID=.

Other than that I imagine it leaks things like /bank/account/id/75795 but the crawler will drop it when it returns a 40X.