New issue
Advanced search Search tips

Issue 619397 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Jun 2016
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Same Origin Bypass

Reported by rohitk0...@gmail.com, Jun 12 2016 
UserAgent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.84 Safari/537.36

Steps to reproduce the problem:
1. Download the attach tester1.html and open
2. Click on test button
3. 

What is the expected behavior?
Iframe reload should not reload the parent window 

What went wrong?
Iframe data uri javascript reloads parent window also

Did this work before? N/A 

Chrome version: 51.0.2704.84  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 21.0 r0
tester1.html
261 bytes View Download

Comment 1 by nparker@chromium.org, Jun 13 2016

Status: WontFix (was: Unconfirmed)
The top level frame does and should have access to reload the whole page, so this is not a security issue.

Comment 2 by lgar...@chromium.org, Jun 13 2016

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
►

Sign in to add a comment