Opera software released version 9.20 of its free desktop browser with some notable security changes including : a fix of character encoding inheritance issue with frames, an issue regarding handling of
FTP PASV response, an issue where scripts could continue to run after leaving the page, and finally XMLHttpRequest now treats separate ports on the same server as a different server. Which mean if you have for example an application server running on port 81 and web server running on port 80 the
AJAX requests between them is considered as cross-server
AJAX requests, and obviously blocked unless you hack it. Anyone have similar architecture, even experimental ?!
The 9.20 changelog mention the Introduction of Opera developers tools, which include the Opera Developer Console, DOM Console, CSS Editor, and DOM Snapshot. These tools are available since November 2006, so I'm not sure what was newly introduced with this release. It's a recommended security upgrade anyway.