Sites can change framed content on other sites

2008-12-16T00:00:00
ID OPERA:893
Type opera
Reporter Opera
Modified 2008-12-16T00:00:00

Description

Scripts are able to change the addresses of framed pages that come from the same site. Due to a flaw in the way that Opera checks what frames can be changed, a site can change the address of frames on other sites inside any window that it has opened. This allows sites to open pages from other sites, and display misleading information on them.