New issue
Advanced search Search tips

Issue 740858 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Jul 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

URL Elements Popup/Preview of url incorrectly parsed with credentials

Reported by wormssm...@gmail.com, Jul 11 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36

Steps to reproduce the problem:
1. have src/href url with credentials (https://a:b@somedomain.com/image.jpg)
2. hover over url in Dev-Tool's Elements panel
3. Profit.

What is the expected behavior?
To see https://a:b@somedomain.com/image.jpg in the popup.

What went wrong?
You see https://currentdomain.com/https:/a:b@somedomain.com/image.jpg

Notice its prepended your current domain (or file:// blar blar) to the start and also removed one of the slashes from the original protocol address. https://a:b to https:/a:b

Did this work before? N/A 

Chrome version: 58.0.3029.110  Channel: canary
OS Version: 10.0
Flash Version: 

Fails to work in both stable 58.0.3029.110 (64-bit)
and Version 61.0.3154.0 (Official Build) canary (64-bit)

Those were the limits of versions easily I have access too.

I have hosted the file on https://wormss.net/urlfail.html too. It is identical to the urlfail.html attached. Depending on what you feel more comfortable with.
 
urlfail.html
348 bytes View Download
urlfail.png
14.7 KB View Download

Comment 1 by alph@chromium.org, Jul 13 2017

Owner: alph@chromium.org
Status: Assigned (was: Unconfirmed)

Comment 3 by alph@chromium.org, Jul 19 2017

Status: Fixed (was: Assigned)

Sign in to add a comment