Opera 11.01
Opera 11.01 for Windows changelog
- Security
- Fixed
- Removed support for "javascript:" URLs in CSS -o-link values, to make it easier for sites to filter untrusted CSS.
- Fixed an issue where large form inputs could allow execution of arbitrary code, as reported by Jordi Chancel; see our advisory.
- Fixed an issue which made it possible to carry out clickjacking attacks against internal opera: URLs; see our advisory.
- Fixed issues which allowed web pages to gain limited access to files on the user's computer; see our advisory.
- Fixed an issue where email passwords were not immediately deleted when deleting private data; see our advisory.
- Fixed an issue which could cause the wrong executable to be used to display a downloaded file in its folder, as reported by Makoto Shiotsuki; see our advisory.
“Critical”と評価された脆弱性は、Webページに巨大なフォームを表示させることで、任意のコードを実行できてしまうというもの。このほか、深刻度が5段階中2番目に高い“High”と評価された脆弱性2件と、3番目に高い“Moderate”が1件、4番目に高い“Low”と評価された脆弱性が1件修正されている。
また、セキュリティの向上のため、値としてURLにJavaScriptを埋め込んだCSSが非サポートとなった。そのほか、多数の不具合が修正されて安定性が向上している。
深刻度が最高の脆弱性1件を含む5件の脆弱性を修正した「Opera」v11.01が公開 (窓の杜)
