CVE 2010-0314
Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.
See the 
CVE page on Mitre.org
for more details.
