New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 789630 link

Starred by 1 user

Issue metadata

Status: Duplicate
Owner:
Closed: Nov 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug


Show other hotlists

Hotlists containing this issue:
XXX


Sign in to add a comment

Students able to bypass the incognito restriction set on the Admin Console

Project Member Reported by luisgonz@google.com, Nov 29 2017

Issue description

UserAgent: Mozilla/5.0 (X11; CrOS x86_64 9901.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.97 Safari/537.36
Platform: 9901.77.0	62.0.3202.97 stable-channel Dell Chromebook 11

Steps to reproduce the problem:
1. Disable the Incognito access from the Admin Console.
2. As a user go to chrome://inspect .
2. Inspect the Extension Chrome OS XKB.
3. This opens the developer tools.
4. Go to the Application's Tab and click or right click on 'Read more about the web manifest'.
5. This will somehow trigger an incognito window and the incognito option is visible from settings. 

What is the expected behavior?
This should open on a regular window

What went wrong?
It opens an incognito window which is disabled from the Admin Console as enforced policy 

Did this work before? N/A 

Chrome version: 62.0.3202.97  Channel: stable
OS Version: 9901.77.0
Flash Version: 

Please a find a detailed video for @google.com at https://drive.google.com/open?id=1kwtcJcSJG3b70g_PpuITCHCrowuoDqX8
 

Comment 1 by luisgonz@google.com, Nov 29 2017

Please ignore and refer to crbug.com/789642


Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Hotlist-Enterprise Type-Bug
Owner: atwilson@chromium.org
Hey Andrew, will you assign this to whomever is appropriate?
Cc: bhthompson@chromium.org
Mergedinto: 789642
Status: Duplicate (was: Unconfirmed)
I'm closing this. Please reopen if we think this isn't covered by crbug.com/789642.

Sign in to add a comment