New issue
Advanced search Search tips

Issue 635441 link

Starred by 1 user

Issue metadata

Status: Archived
Owner: ----
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Google Chrome unexpectedly closes when we introduce the following url in the address bar and press the Enter key: chrome://resources/js/i18n_template.js?a

Reported by jm.acun...@gmail.com, Aug 8 2016

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2743.116 Safari/537.36

Steps to reproduce the problem:
1- introduce the url chrome://resources/js/i18n_template.js?a in the address bar
2- press the Enter key

- Test with any character following .js
- In all URLs whose path is relative chrome://resources:

. chrome://resources/polymer/v1_0/neon-animation/web-animations.html
. chrome://resources/css/roboto.css
. chrome://resources/html/cr.html
. chrome://resources/html/load_time_data.html
. chrome://resources/html/util.html
. chrome://resources/polymer/v1_0/neon-animation/web-animations.html
. chrome://media-router/elements/issue_banner/issue_banner.html
. chrome://media-router/elements/media_router_search_highlighter/media_router_search_highlighter.html
. ...

What is the expected behavior?
You can not access this website.

What went wrong?
Google Chrome unexpectedly closes.

Crashed report ID: 

How much crashed? Whole browser

Is it a problem with a plugin? No 

Did this work before? N/A 

Chrome version: 52.0.2743.116  Channel: stable
OS Version: 10.0
Flash Version: Shockwave Flash 22.0 r0

Some considerations:

1- in Google Chrome Canary Versión 54.0.2823.0 canary (64-bit), the behavior is correct:

"You can not access this website.
It is possible that the website chrome://resources/js/i18n_template.js to be temporarily down or it may have moved permanently to another direction"

2- theoretically, could generate a link that when clicked open a new tab causing the closure of the browser.

. this is not possible because the browser can not load local resources: "Not allowed to Local load resource"
. if we shorten the url? --> Most url shorteners not validate the path chrome:// because not fill the http or https protocol
But there is a shortener that does allow so: http://bit.do/
Example: http://bit.do/cifgN- (statistics page)

The http://bit.do/cifgN link redirects to chrome://resources/js/i18n_template.js?a

If I run the link http://bit.do/cifgN in Mozilla Firefox, returns an error page 301 Moved Permanently
If I do in Google Chrome, the request headers returned the message:
"Provisional headers are shown
Upgrade-Insecure-Requests:1"

3- add a local html page:

<!doctype>
<html>
<head></head>
<body>
<iframe src="chrome://resources/js/i18n_template.js?a"></iframe>
</body>
</html>

To run on Google Chrome --> Not allowed to load local resource: chrome://resources/js/i18n_template.js?a

Now I replace the source by http://bit.do/cifgN:
<iframe src="http://bit.do/cifgN"></iframe>

Surprise: AVG Antivirus Business Edition identifies the file as a serious virus (attached screenshots)
 
test-chrome1.png
85.4 KB View Download
test-chrome2.png
88.6 KB View Download
ice_video_20160808-105315.webm
5.7 MB View Download
Labels: TE-NeedsTriageHelp
Components: Blink>Forms>Url

Comment 3 by tkent@chromium.org, Aug 22 2016

Components: -Blink>Forms>Url UI>Browser>Navigation UI>Browser>WebUI
Addressbar isn't Blink.

Fixed in version 53.0.2785.89 m

Thanks!
Project Member

Comment 5 by sheriffbot@chromium.org, Sep 7 2017

Status: Archived (was: Unconfirmed)
Issue has not been modified or commented on in the last 365 days, please re-open or file a new bug if this is still an issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment