New issue
Advanced search Search tips

Issue 750728 link

Starred by 2 users

Issue metadata

Status: Duplicate
Merged: issue 722122
Owner: ----
Closed: Jul 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

Accidently closed one of incognito window, was able to login in my gmail, linkedin account without password from 2nd incognito window

Reported by bajpaira...@gmail.com, Jul 31 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36

Steps to reproduce the problem:
1. Open 2 incognito windows
2. Open few links in 1 window including logged in gmail or any google account.
3. Now close 1 of the window and go to other window and type gmail.com, it will open gmail account without authentication.

What is the expected behavior?
It should ask for either restoring if we open chrome opening multiple tabs in incognito or should not be able to login from other incognito window.

What went wrong?
My personal info if i logged in from someone else laptop, they might be able to access my personal details.

Did this work before? N/A 

Chrome version: 59.0.3071.115  Channel: n/a
OS Version: 10.0
Flash Version:
 
Components: UI>Browser>Incognito
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Mergedinto: 722122
Status: Duplicate (was: Unconfirmed)
Indeed, all Incognito windows share a single session.

Sign in to add a comment