Opera 10.63

Opera 10.63 is uitgebracht. In deze versie van de Noorse browser worden vijf beveiligingslekken gedicht en vele fouten opgelost, waaronder enkele die betrekking hebben op de afhandeling van JavaScript.
 
Opera 10.63 is te downloaden voor Windows, Mac OS X en Linux. Een Nederlandse vertaling is ook aanwezig.

Release notes:

• Crash when removing custom settings folders
• Start Bar being blanked out after opening a background tab
• Opera Unite Messenger application not loading
• Crash when saving a file while the page redirects
• Crash after leaving a page containing Flash with wmode="transparent"
• Using Opera Link, bookmarks dragged out of the Opera Mini folder are recreated when sent as added in the Opera Mini folder again
• Opera Link freezing on startup
• Fallback to a second address being very slow
• Reloading pages give multiple unclosable download dialogs

• Handling of Content-Disposition extended parameters

• Memory corruption when using SVG in an <img> element
• Several JavaScript-related issues, including one with Yahoo! Mail Classic
• A mouse focus problem related to plug-ins
• Incorrect compilation to native code leads to wrong arithmetic results
• Crash when assigning data or src attribute on a focused and highlighted <input> element with dirty layout
• JavaScript alerts opening shortly after a page loads close instantly

• Added search suggestions from Baidu

• 100% CPU usage occurring when starting Opera
• Crash when opening a file with Content-Disposition: attachment directly in Opera

• Fixed an issue that allowed cross-domain checks to be bypassed, allowing limited data theft using CSS, as reported by Isaac Dawson; see our advisory.
• Fixed an issue where manipulating the window could be used to spoof the page address; see our advisory.
• Fixed an issue with reloads and redirects that could allow spoofing and cross-site scripting; see our advisory.
• Fixed an issue that allowed private video streams to be intercepted, as reported by Nirankush Panchbhai of Microsoft Vulnerability Research; see our advisory.
• Fixed an issue that caused JavaScript to run in the wrong security context after manual interaction; see our advisory.