OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
[Full-Disclosure] Opera7.53 show you wrong URL adsress (NOT security issue,Sorry but unbelievable)

From: bitlance winter (bitlance_3hotmail.com)
Date: Tue Jul 20 2004 - 11:07:50 CDT

============
References:
http://secunia.com/advisories/12028/

Quoted:
Solution:
This vulnerability has been eliminated in version 7.53.
http://www.opera.com/download/
============

How to eliminate ?
Opera developer give it away showing you reet URL!
Unbelievable.

Let us checkout this HTML and look at address bar.

[html]
[head]
[script]
location.replace('http://www.google.com/');
[/script]
[/head]
[body]
[h1]title[/h1]
[/body]
[/html]

Or checkout,

[html]
[head]
[/head]
[body onload="location.replace('http://www.google.com/');"]
[h1]Onload?[/h1]
[/body]
[/html]

NOTE: It is not security issue.
It is a simple bug or the best manual workaround.

Best Regards.

--
bitlance winter

_________________________________________________________________
Don’t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html