Google Chrome through 32.0.1700.23 on Android allows remote attackers to spoof the address bar via unspecified vectors.
https://code.google.com/p/chromium/issues/detail?id=324969
http://googlechromereleases.blogspot.com/2014/01/stable-channel-update.html