New issue
Advanced search Search tips

Issue 604997 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Physical location access

Reported by bansallo...@gmail.com, Apr 20 2016

Issue description


VULNERABILITY DETAILS
Chrome is not showing permission pop-up while a website is trying to access my physical location

VERSION
Chrome Version: 50.0.2661.75 + stable
Operating System: Windows 8.1 Enterprise

REPRODUCTION CASE
I can't attach any HTML for this. I will share a link. Scenarios details are below.

1. Open the link "http://pg-stg-web03.northeurope.cloudapp.azure.com/home/" It's a test website.
2. This website used to asks about the physical location access as soon as user loads it.
3. While using the previous version of the Chrome this scenario was working fine, and user was used to ask for the permission
4. Since I update to new chrome version 50.0.2661.75, permission pop-up is not displayed to user.
5. You can try opening the same link in other browsers and it's still asking permission for physical location access. 

Note:
1. I verified in Content settings for location access, Option selected is "Ask when a site tries to track your physical location.
2. Under Manage Exceptions also specified url is not present.

 

Comment 1 by vakh@chromium.org, Apr 20 2016

Labels: -Restrict-View-SecurityTeam
Status: WontFix (was: Unconfirmed)
This is Working As Intended.
The geo-location API has been removed from insecure origins (HTTP).
For more details, please see: https://bugs.chromium.org/p/chromium/issues/detail?id=561641
Project Member

Comment 2 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 3 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic

Sign in to add a comment