An URL spoofing flaw was found in the Chromium browser.
https://googlechromereleases.blogspot.fr/2016/10/stable-channel-update-for-desktop.html