a security flaw in Microsoft Edge . The issue enables any website to identify someone by their username from another website , according to Ariel Zelivansky . More specifically the bod allegesVulnerability-related.DiscoverVulnerabilitythat Edge exposes the URL of any JavaScript Fetch response , in contradiction to the specification . This is a problem because it 's possible to identify netizens by crafting a fetch request in a webpage that will redirect to a URL containing the visitor 's username ( e.g . requesting https : //facebook.com/me will pull in https : //facebook.com/username ) . Zelivansky alertedVulnerability-related.DiscoverVulnerabilityMicrosoft but the software giant saidVulnerability-related.DiscoverVulnerabilitythe issue was not a security problem . El Reg also prodded Redmond only to be told the tech giant had nothing to add beyond its response to Zelivansky . The researcher went publicVulnerability-related.DiscoverVulnerabilitywith his findings and tipped off The Reg earlier this month after Redmond decided the issue didn't meritVulnerability-related.PatchVulnerabilitya security fix . The privacy shortcoming has spawned a discussion thread on Reddit . ® Despite Microsoft 's silence , it turns out the Windows giant has decided to assign an engineer to look into the matter – but it is still not being treated as a security vulnerability .