New issue
Advanced search Search tips

Issue 642452 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Bugged GOOGLE Omnibox

Reported by karamsinghdeve93@gmail.com, Aug 30 2016

Issue description

Hello Google !
I am Karam Singh Deve from Pune-India.

I have found a bug regarding OMNIBOX for Chrome browser.

please go through the attached file for the bug.
 
OMNIBOX BUGGED.docx
1.0 MB Download

Comment 1 by vakh@chromium.org, Aug 31 2016

Status: WontFix (was: Unconfirmed)
Thanks for reporting this issue with a detailed write-up.

Unfortunately, this is an implementation choice made by google.com, and is not a Chrome bug so I am marking it as WontFix.
You simply can't ignore this bug as it is not maintaining the consistency of search operation .
I have already attached the detailed steps to replicate the issue.

Also other browsers are not showing such kind of anamoly, there screenshots are also added in previous attachment with Chrome's nOt sO cOnSiStEnT bEhAvIoUr(consistent behaviour!!!!)

Even if this is an implementation choice made by GOOGLE, but its a major security concern!!


Google is running such a huge program "BUG BOUNTY" aiming to find security issues.
The points which were not considered during initial designing OR irrational behaviour of logic are CALLED AS BUG!

Yes I acknowledge the decision of Google team but this can be easily exploited and made a huge security concern!

You are closing this incident as WontFix stating that it's a Google implementation (open point left while designing)than there is no point of finding bug and alerting Google. 

I am expecting that proper communication within team must be taken place before any exploitation of these inconsistent behaviour. Which is not observed in other competitors Browsers viz MOZILLA FIREFOX as per screenshots in previous attachment.

Regards,
Karam Singh


Project Member

Comment 3 by sheriffbot@chromium.org, Dec 8 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment