New issue
Advanced search Search tips

Issue 772121 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Oct 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug-Security



Sign in to add a comment

We can see the list of documents after reloading a HTML page saved locally in Incognito

Reported by alyakova...@gmail.com, Oct 5 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36

Steps to reproduce the problem:
1. Log in to your account
2. Go to Google docs
3. Download the document to your computer
4. Open the incognito window
5. Drag the document icon to the incognito window

What is the expected behavior?

What went wrong?
We see a list of documents that are not logged in this window, but we can not view them

Did this work before? N/A 

Chrome version: 61.0.3163.100  Channel: stable
OS Version: 10.0
Flash Version:
 
In step #3, how specifically did you "Download the document"? Did you click File > Download As > (Something?) or did you do something else?

Could you please include screenshots of this problem, especially the last step where you see something unexpected?

3. I save the document with Ctrl+S (type Webpage)

Sorry, my Windows and Chrome in Russian language
Screenshot_1.png
62.0 KB View Download
Components: UI>Browser>Incognito Blink>SavePage
Status: WontFix (was: Unconfirmed)
Summary: We can see the list of documents after reloading a HTML page saved locally in Incognito (was: We can see the list of documents)
In English at least, Google Docs intercepts the CTRL+S hotkey to help prevent saving the wrong thing, but a user can still manually save the page by clicking the Chrome menu > More Tools > Save page as. Saving the "page" this way does not save the document you're editing but instead attempts to save the entire Docs application (which doesn't really work).

It's absolutely possible that a HTML file saved by Chrome could contain private information that is shown when the file is reloaded in Incognito mode. The file saved could also contain tokens that identify you or grant access to resources.

If you wish to save a document in Google Docs, please click File > Download As and pick a file format.
Project Member

Comment 4 by sheriffbot@chromium.org, Jan 12 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment