There is a bug in Netscape Communicator 4.6 Win95, 4.07 Linux (probably others?), which allows sniffing URLs from another window.
The problem is the injection of JavaScript code in the JavaScript console using "data:" protocol.
Access to document.links is disallowed in NC 4.6, but the document may be read using find().
Type your URL in the "Tracked window" and then click "Show URL" in this window.
Workaround: Disable Javascript.

Show URL
Written by Georgi Guninski