The Opera Desktop Team reports:
- Fixed an issue that allowed cross-domain checks to be bypassed,
allowing limited data theft using CSS, as reported by Isaac
Dawson.
- Fixed an issue where manipulating the window could be used to
spoof the page address.
- Fixed an issue with reloads and redirects that could allow
spoofing and cross-site scripting.
- Fixed an issue that allowed private video streams to be
intercepted, as reported by Nirankush Panchbhai of Microsoft
Vulnerability Research.
- Fixed an issue that caused JavaScript to run in the wrong
security context after manual interaction.