Re: Opera/Konqueror: data: URL scheme address bar spoofing

[Harri Porten <porten () kde org>]

Hi!

> With a specially crafted web page, an attacker can redirect
> a www browser to the page, which URL (in the url bar) resembles
> an arbitrary domain choosen by the attacker.

Attached is a patch that just got applied in KDE's repository to fix the 
problem in Konqueror.

Thanks for the report,

Harri.

Attachment: location.diff
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/