New issue
Advanced search Search tips

Issue 738804 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Jul 2017
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Web pages leave browser containment, hide address bar, and change colors.

Reported by myusualn...@gmail.com, Jul 3 2017

Issue description

This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home
/chromium-security/security-faq

Please see the following link for instructions on filing security bugs:
http://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
Please provide a brief explanation of the security issue.
Web pages can block appearance of address bar, and emulate the appearance of it when the page is scrolled down.

VERSION
Chrome Version: [59.x.x.x] + [stable, beta, or dev]
Operating System: [android 6.01Please indicate OS, version, and service pack level]

REPRODUCTION CASE
I believe I saw an article that this "feature" was being added..
It is a violation of the boundary between browser and user.
Also, the idea that a web page can change the color of the address bar is also a violation of the sacred expectations that a browser is a safe viewer.


Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION
Type of crash: [tab, browser, etc.]
Crash State: [see link above: stack trace, registers, exception record]
Client ID (if relevant): [see link above]

 
Labels: -Restrict-View-SecurityTeam allpublic OS-Android
Status: WontFix (was: Unconfirmed)
Yes, the fact that the Android omnibox can be scrolled out of view is working as intended.

The fact that the a web page may use meta name="theme-color" content="#abc" to set the background color of the Chrome is also working as intended.

Sign in to add a comment