Dismiss "Look Up" UI when switching tabs
Reported by
chromium...@gmail.com,
Nov 25 2017
|
||||||||
Issue descriptionVULNERABILITY DETAILS Please provide a brief explanation of the security issue. VERSION Chrome Version: 64.0.3277.0 Operating System: Mac REPRODUCTION CASE 1. Click in 'Here' 2. Select the text 3. Right click >> click on Look up "Text..." and wait 4. Observe The scenario of this bug is similar to bug 673163 .
,
Nov 25 2017
This is a hypothetical attack, evil.com can open an OAuth page and display a "You should click accept" on that tab, which would be bad.
,
Nov 25 2017
But I'm not sure if this is a security bug.
,
Nov 25 2017
Thank you for providing more feedback. Adding requester "elawrence@chromium.org" to the cc list and removing "Needs-Feedback" label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Nov 26 2017
Agree with elawrence's assessment. The friction is much higher than bug 673163 . Change type to BUG.
,
Nov 27 2017
Able to reproduce the issue on Mac 10.12.6, Win-10 and Ubuntu 14.04 using chrome reported version #64.0.3277.0 and latest canary #64.0.3278.0. The issue is specific to OS-Mac. This is a non-regression issue as it is observed from M50 old builds. Hence, marking it as untriaged to get more inputs from dev team. Thanks...!!
,
Dec 7 2017
[Mac triage]
,
Dec 10
This issue has been Available for over a year. If it's no longer important or seems unlikely to be fixed, please consider closing it out. If it is important, please re-triage the issue. Sorry for the inconvenience if the bug really should have been left as Available. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Dec 11
Seems we should dismiss these on navigation. Sending this one to ellyjones@.
,
Dec 12
|
||||||||
►
Sign in to add a comment |
||||||||
Comment 1 by elawrence@chromium.org
, Nov 25 2017Summary: Security: Selected text can appear over the wrong tab when using Mac "Look up" feature (was: Security: Selected text can appear over the wrong tab )