New issue
Advanced search Search tips

Issue 702759 link

Starred by 4 users
Status: Available
Owner: ----
Cc:
asanka@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Authentication required popup can be repeatedly raised by a malicious site without the possibility of dismissing it

Reported by switchbr...@gmail.com, Mar 17 2017 
UserAgent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 Safari/537.36

Steps to reproduce the problem:
1. Create a malicious website that requires authentication and repeats requests forever

What is the expected behavior?
"Prevent site from generating more dialogs" checkbox should appear

What went wrong?
There is no way to prevent the site from generating infinite authentication required dialogs

Did this work before? N/A 

Chrome version: 56.0.2924.87  Channel: n/a
OS Version: 10.0
Flash Version:

Comment 1 by tsepez@chromium.org, Mar 17 2017

Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Although annoying, we treat these kinds of denials as functional issues, rather than security issues per-se.  Removing restrictions.

Comment 2 by mattm@chromium.org, Mar 20 2017

Components: Internals>Network>Auth
Status: Untriaged (was: Unconfirmed)

Comment 3 by elawrence@chromium.org, Feb 22 2018 

 Issue 814601  has been merged into this issue.

Comment 4 by asanka@chromium.org, Mar 15 2018

Status: Available (was: Untriaged)

Comment 5 by mmenke@chromium.org, May 2 2018

Labels: Hotlist-Abusive Network-Triaged
►

Sign in to add a comment