New issue
Advanced search Search tips

Issue 700665 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 626951
Owner: ----
Closed: Mar 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: iOS
Pri: 2
Type: Bug-Security



Sign in to add a comment

Chrome any site redirects jump (Userinfo in URLs is confusing)

Reported by cisk33...@gmail.com, Mar 11 2017

Issue description

Steps to reproduce the problem:
1. Open the following poc in the ios version of Chrome:
    http://www.google.com@apple.com

2. Can be achieved by jumping to apple.com

3. Replace google.com with an attacked site
   Replace apple.com with the attacker's website

   Can achieve any site jump

What is the expected behavior?
Can be achieved by jumping to apple.com

What went wrong?
In the ios version of Chrome is not on the back of the site, prompt operation (pc version of Chrome also exist
in)

ios videoļ¼š
https://drive.google.com/open?id=0B9ddY8WLTiI6Qk5GUmlBWGFQQ0k

Did this work before? N/A 

Chrome version: 56.0.2924.79  Channel: stable
OS Version: 10.2.1
Flash Version: 

Fix suggestions: 1.pc version of Chrome as Firefox prompts users
                 2.ios version of Chrome as Safari as prompted users
 
test3.html
143 bytes View Download
Mergedinto: 626951
Status: Duplicate (was: Unconfirmed)
Summary: Chrome any site redirects jump (Userinfo in URLs is confusing) (was: Chrome any site redirects jump)
Please see https://www.chromium.org/Home/chromium-security/security-faq#TOC-Is-Chrome-s-support-for-userinfo-in-HTTP-URLs-e.g.-http:-user:password-example.com-considered-a-vulnerability- for discussion of why this is not a security vulnerability.
Project Member

Comment 2 by sheriffbot@chromium.org, Jun 18 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment