VULNERABILITY DETAILS
Use of name attribute as 'domain' causes the latest Google Chrome to confuse as a result of which the DOM gets clobbered and document.domain API of JS gives incorrect value.

VERSION
Chrome Version: [Version 61.0.3163.100 (Official Build) (64-bit)] + [stable]
Operating System: [Windows 7]

REPRODUCTION CASE
Include the following HTML code in browser and observe:

<h3>Welcome to the real-time HTML editor!</h3>
<p>Type HTML in the textarea above, and it will magically appear in the frame below.</p>

<script>document.write(document.domain);</script>

<br>
<br>
<br>

<form name="domain"></form>

<br>
<br>
<br>


<script>document.write(document.domain);</script>
 

Deleted: Chrome DOM Clobbering.PNG 23.4 KB

	Chrome DOM Clobbering.PNG 23.4 KB View Download