Issue metadata
Sign in to add a comment
|
Security: Chrome for iOS incognito leaking visited websites
Reported by
sol.pl...@gmail.com,
Jul 26 2017
|
||||||||||||||||||||||
Issue descriptionThis template is ONLY for reporting security bugs. If you are reporting a Download Protection Bypass bug, please use the "Security - Download Protection" template. For all other reports, please use a different template. Please READ THIS FAQ before filing a bug: https://www.chromium.org/Home /chromium-security/security-faq Please see the following link for instructions on filing security bugs: http://www.chromium.org/Home/chromium-security/reporting-security-bugs NOTE: Security bugs are normally made public once a fix has been widely deployed. VULNERABILITY DETAILS Chrome for iOS leaks the last visited incognito URL between sessions VERSION Chrome Version: 60.0.3112.72 + ios? Operating System: ios 10.3.3 REPRODUCTION CASE - open a single tab in incognito - navigate to secret url - close tab - open a *new* incognito tab - secret url is revealed FOR CRASHES, PLEASE INCLUDE THE FOLLOWING ADDITIONAL INFORMATION Type of crash: [tab, browser, etc.] Crash State: [see link above: stack trace, registers, exception record] Client ID (if relevant): [see link above]
,
Jul 27 2017
,
Jul 27 2017
I can't reproduce this on Chrome 60 on iOS 10.3.3, for what it's worth.
,
Jul 27 2017
,
Jul 27 2017
Okay, let's see if I can narrow this down… The “open a new incognito” tab step must be performed by tapping the big (+) in the tab summary view (sorry I don't know the proper name for this – check the video if you don't know what I mean). I'm using an old iPad Air model A1475 (2013–2014). The url is only exposed for the duration of the animation, which makes me wonder if there are hacks in place to make the animations feel snappy on old/slow devices?
,
Oct 2
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 Deleted