<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Opera data exposure through search engine behavior]]></title><description><![CDATA[<p dir="auto">All,</p>
<p dir="auto">After spending a couple hours with the latest version of Opera, reading posts, not finding any answers, seeing numerous posts on this topic…. The issue is when a user (coming from one of the various mainstream browsers) tries to enter an FQDN into Omnibox and the result is a device or namespace being sent to a 3rd party.  In today’s environments where concerns around security are on the rise, this can be considered a form of data exfiltration.  eg: exposing sensitive namespace(s), device names, etc. to a 3rd party, in addition could be in violation of a security policy.</p>
<p dir="auto">Unfortunately, there does not seem to be any configuration option to protect against this behavior.  At least in Chrome (which Opera appears to share roots for Omnibox), you can specify a new search engine and make it the default: URL being “<a href="http://127.0.0.1/%25s%E2%80%9D" target="_blank" rel="noopener noreferrer nofollow ugc">http://127.0.0.1/%s”</a> which simply causes the request to fail.  Opera prevents creation of a new search being configured as the default, thus removing any possibility of protecting against this condition.  Furthermore, Chrome and many browsers remember visited sites and it's faster to start typing the FQDN and then hit &lt;enter&gt; on the first entry (as you've entered enough data for the entry to match) vs. scanning through bookmarks (time savings).</p>
<p dir="auto">Unless there’s a solution that isn’t clearly documented, the only option appears to be using one of the default search engines and blackhole’ing the entire namespace in one’s DNS servers.  eg: create a zone (<a href="http://www.bing.com" target="_blank" rel="noopener noreferrer nofollow ugc">www.bing.com</a> as example) and make bing the default search engine.  This at least prevents Opera’s behavior of trying to submit data to a 3rd party.  It’s a crude workaround, but protects against this behavior.</p>
<p dir="auto">If there’s a configuration option somewhere to protect against this behavior, would like to know.</p>
<p dir="auto">Thanks!</p>
]]></description><link>https://forums.opera.com/topic/30042/opera-data-exposure-through-search-engine-behavior</link><generator>RSS for Node</generator><lastBuildDate>Sat, 16 May 2026 21:51:01 GMT</lastBuildDate><atom:link href="https://forums.opera.com/topic/30042.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 11 Dec 2018 13:31:08 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Opera data exposure through search engine behavior on Tue, 11 Dec 2018 17:43:50 GMT]]></title><description><![CDATA[<p dir="auto">Opera does have a couple of included search engines with no autosuggest capability built in - if you switch to one of those the dropdown will not include suggestions.</p>
]]></description><link>https://forums.opera.com/post/160680</link><guid isPermaLink="true">https://forums.opera.com/post/160680</guid><dc:creator><![CDATA[sgunhouse]]></dc:creator><pubDate>Tue, 11 Dec 2018 17:43:50 GMT</pubDate></item></channel></rss>