New issue
Advanced search Search tips

Issue 685792 link

Starred by 1 user
Status: Archived
Owner: ----
Closed: Mar 2017
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Tooltip box in one webapp displays content from other loaded page.

Reported by aure...@gmail.com, Jan 26 2017 
UserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.75 Safari/537.36

Steps to reproduce the problem:
1. I visit http://godbolt.org/
2. Mouse over element "Intel" which displays a tooltip.
3. The text in the tooltip is sometimes not displayed but in one rare case I could observe text from another opened tab. It was appended to the tooltip string.

What is the expected behavior?

What went wrong?
Hard to reproduce and I don't know if this would have any security implications at all. All I know is that one page clearly displayed information from another page. In a tooltip window provided by that webapp. 

Did this work before? N/A 

Chrome version: 55.0.2883.75  Channel: n/a
OS Version: 
Flash Version:

Comment 1 by est...@chromium.org, Jan 26 2017

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Needs-Feedback Security_Impact-None Type-Bug
Thanks for the report. I can't reproduce this issue; have you seen it happen multiple times? I'm not sure there's much we can do about it without a reliable reproduction.

Do you have any extensions installed that might be interfering with the page? Is it possible to capture a screenshot of the behavior?

I'm removing security labels because I think the damage an attacker could do is quite limited, especially if the bug is difficult to reproduce.

Comment 2 by nyerramilli@chromium.org, Feb 1 2017

Labels: Needs-Milestone
Project Member

Comment 3 by sheriffbot@chromium.org, Mar 3 2017

Status: Archived (was: Unconfirmed)
No feedback was received in the last 30 days from reporter "aurel.w@gmail.com", so archiving this. Please re-open or file a new bug if this is still an issue.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment