"Microsoft Internet Explorer isn't the only browser hit by a
spoofing flaw that could be exploited by phishers. But it also
won't be releasing a patch for it anytime soon.
"According to Secunia Research, IE, Mozilla Firefox, Opera and
Apple Safari have a similar 'flaw' related to their use of
JavaScript dialog boxes.
"'The problem is that JavaScript dialog boxes do not display or
include their origin, which allows a new window to open, e.g. a
prompt dialog box, which appears to be from a trusted site,' a
Secunia advisory states..."
