"Most modern browsers... have vulnerabilities that allow hosts of malicious websites to extract hundreds to thousands of URLs in a user’s web history, per new research from the University of California San Diego...
The only browser that was immune to the attacks was Tor Browser"
Yup, sounds about right.
https://motherboard.vice.com/en_us/article/zm9jd4/old-school-sniffing-attacks-can-still-reveal-your-browsing-history?fbclid=IwAR0nP1ipFsnFX7NKMHTvVBv0PPOLnvxRTaqleuWVyy2AO2A6gXJ0BsajWgA