New issue
Advanced search Search tips

Issue 771764 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Bypass Chromium and Chromium M Licenses using JS

Reported by chrispia...@gmail.com, Oct 4 2017

Issue description

Heyo, I'm gonna cut to the chase...

So Chromium and Chromium M act as licenses (or at least one of em does), these licenses can be completely disregarded by a chromebook until a reboot occurs if you do the following:

1. Navigate to chrome://extensions
2. Enable developer mode
3. Find Chromium and click background.html link
4. Inspect the element and type in the console "window.close()" without the quotes
5. Do the same for Chromium M

This will bypass (to the best of my knowledge) a web filter that an admin may have placed there because the browser based os responds to window.close() just as if it were a JS based webpage.


I just didn't want this to fall into the wrong hands. Thanks Google Team.
 
Status: WontFix (was: Unconfirmed)
It looks like you're referring to some third party extensions for internet filtering. Unfortunately we can't help here since they aren't made by Google.
Project Member

Comment 2 by sheriffbot@chromium.org, Jan 11 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment