New issue
Advanced search Search tips

Issue 726967 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 1
Type: Bug
Team-Security-UX
Proj-XR



Sign in to add a comment

WebVR interaction can hide security indicator icon in regular omnibox

Project Member Reported by lgar...@chromium.org, May 27 2017

Issue description

Chrome Version: 58.0.3029.83
OS: Android 7.1.2
Device: Nexus 5X

What steps will reproduce the problem?
(1) Search for "webvr test" and click on "WebVR > Samples" to get to https://webvr.info/samples
(2) Try to put the Nexus 5X into ta Daydream device and click around on the WebVR UI.
(3) Exit WebVR
(4) Navigate back.

What is the expected result?
The security indicator in the regular omnibox is still visible, *especially* after navigating back to google.com

What happens instead?
The security indicator is hidden.

cjgrant@, could you investigate?

Tentatively assigning M59; we should evaluate security once we know how unlikely the triggering conditions are.
 
Screenshot_20170526-185459.png
267 KB View Download
Screenshot_20170526-185438.png
214 KB View Download
Summary: WebVR interaction can hide security indicator icon in regular omnibox (was: WebVR interaction can hide security indicator in regular omnibox)
Labels: Proj-VR Needs-Feedback OS-Android
I cannot reproduce this, and the steps are unclear.

Specifically:
* (1) does not activate WebVR. From the second screenshot, it appears that (1) also includes clicking the "XX - VR Controllers" sample link.
* Nexus 5X does not support Daydream. Do you mean a Cardboard device or did you use a different phone?
1) Yes, I was clicking around on the demos.

Yes, this is on a Nexus 5X. I tried it to see what would happen.
lgarron said inserting the 5X resulted in an error, which I can reproduce. However, I cannot reproduce the missing indicator on a 5X on Stable 58.0.3029.83 or Beta 59.03071.82. Maybe there is a specific series of steps that will cause this that I am not hitting.

One thing I noticed is that the lock is added after the URL is loaded and the "https" turns green.
Status: WontFix (was: Assigned)
I can't seem to reproduce this. :-(
Let's WontFix, but keep a sharp eye out for any funky omnibox behaviour in relation to WebVR.

> One thing I noticed is that the lock is added after the URL is loaded and the "https" turns green.

That's expected if you are not coming from an HTTPS page.

Components: Blink>WebXR

Sign in to add a comment