New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 651055 link

Starred by 4 users
Status: WontFix
Owner: ----
Closed: Sep 2016
Cc:
elawrence@chromium.org
est...@chromium.org
nparker@chromium.org
█ durga.behera@chromium.org
vakh@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug
Team-Security-UX



Sign in to add a comment

Security: Dangerous icon should not stays on another page which is not dangerous

Reported by chromium...@gmail.com, Sep 28 2016 
VERSION
Chrome Version: 55.0.2874.1
Operating System: Windows 7 

REPRODUCTION CASE
1. Set up a local webserver to host index.html and test.html
2. Go to localhost/index.html
3. Go to localhost/test.html
testcase.rar
191 bytes Download
actual.mp4
455 KB View Download

Comment 1 by elawrence@chromium.org, Sep 28 2016

Components: Security>UX
Labels: Hotlist-SecurityIndicators
Two same-origin pages, loading the first one with dangerous subframe is blocked via interstitial. When loading the second page (contains only a few lines of text and no malicious subframe); there's no interstitial block, but the "Dangerous icon" remains.

Comment 2 by elawrence@chromium.org, Sep 28 2016 

I wasn't able to reproduce this with 55.0.2874.0 64-bit on Windows 7. 

It's probably not relevant but the RAR contains "test.html" not "content.html" as shown in the video.

Comment 3 by f...@chromium.org, Sep 28 2016

Components: Services>Safebrowsing
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Status: WontFix (was: Unconfirmed)
This is WAI.

If you override a Safe Browsing interstitial for a hostname in a WebContents, Chrome won't show a warning again for that hostname in that WebContents. Therefore, the "dangerous" label remains as long as you are on the same hostname in that WebContents.

If you were to load that same hostname in a new WebContents, the label would be gone. Similarly if you  were to load a different hostname in the same WebContents, the label would be gone.

Eric, do you find this surprising / undesirable? We could theoretically change it.

Comment 4 by lgar...@chromium.org, Oct 19 2016

Components: UI>Browser>Omnibox>SecurityIndicators

Comment 5 by est...@chromium.org, Oct 26 2016

Cc: est...@chromium.org
 Issue 659709  has been merged into this issue.

Comment 6 by lgar...@chromium.org, Nov 24 2016

Components: -Security>UX
Labels: -Hotlist-SecurityIndicators

Comment 7 by elawrence@chromium.org, Jan 11 2017

Cc: nparker@chromium.org durga.behera@chromium.org elawrence@chromium.org
 Issue 679839  has been merged into this issue.
►

Sign in to add a comment