Pages held in frames are able to change the location of pages in unrelated frames on the parent page

2008-06-11T00:00:00
ID OPERA:885
Type opera
Reporter Opera
Modified 2008-06-11T00:00:00

Description

Pages from different sources held on the same parent page should not be able to modify the locations of each other. In affected Opera versions, if a page contains frames from both a trusted but not secured, and an untrusted source, the untrusted page is able to replace the contents of a named trusted frame, causing it to display misleading information.Note that since the untrusted frame could also display misleading information as its own contents, authors of sites containing sensitive information should not place frames from untrusted sources on their pages, without offering the user some means to identify the content as untrusted.