New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 642420 link

Starred by 1 user

Issue metadata

Status: Duplicate
Owner:
Long OOO (go/where-is-mgiuca)
Closed: Sep 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Address bar spoofing

Reported by chromium...@gmail.com, Aug 30 2016

Issue description

VERSION
Chrome Version: 55.0.2844.0 canary (64-bit)
Operating System: Windows 7

REPRODUCTION CASE
1. Enter http://xn--nebl.xn--9dbq2a/172.217.16.206
2. Observe.
 
screen shot.png
66.0 KB View Download

Comment 1 by vakh@chromium.org, Aug 31 2016

Cc: mgiuca@chromium.org
It looks like this is working as intended.
mgiuca@ -- what do you think?
Cc: -mgiuca@chromium.org
Labels: -Restrict-View-SecurityTeam
Mergedinto: 638818
Owner: mgiuca@chromium.org
Status: Duplicate (was: Unconfirmed)
This is a dupe of Issue 638818.

In fact, it is the same example that I wrote on that bug (with the IP address changed) and made public two days ago. Are you just re-reporting bugs you have already seen reported on this issue tracker? Please don't do that. If a bug affects you, you can star it instead of filing a new one.
Matt, thank you for the update!

Actually I have seen this in https://bugs.chromium.org/p/chromium/issues/detail?id=495933#c6 (already fixed in M44) and I used IP address instead of example.com.
#3 OK no problem. Thanks for the report and sorry for the assumption.
Project Member

Comment 5 by sheriffbot@chromium.org, Feb 15 2018

Labels: allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment