Top 10 winner
A different Opera
opera:config is the one Opera local resource that can reach local files and rewrite browser settings, including the external mail handler — set that and any mailto: navigation runs arbitrary code. Opera 9.62 patched a parameter injection in opera:historysearch that let a remote script frame opera:config and drive it, but Opera still enforces no same-origin boundary between opera: resources.
Record
- Researcher
- Aviv Raff
- Published by
- aviv.raffon.net
- Date
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Aviv Raff, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .