TLDR Tech / InfoSec
You Are Not Where You Think You Are, Opera Browsers Address Bar Spoofing Vulnerabilities
Renwa documents several address bar spoofing bugs across Opera GX, Opera, Opera Touch, and Opera Mini on desktop and Android. Techniques include abusing intent URLs and data URLs, silent installation, and upgrading of GX Mods into extensions that can spawn chrome.windows popups without a URL bar, and mis-handled Google search redirects that rewrite the visible URL while serving attacker content. Other issues misuse custom schemes and fullscreen mode to freeze or hide the real address bar. All reported flaws were fixed and rewarded through Opera's bug bounty.
Read the full story