New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 810262 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Buried. Ping if important.
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Regression : Unable to open 'Consolidated' link in tab after clicking on it for www.indianotes.com.

Reported by rp...@etouch.net, Feb 8 2018

Issue description

Version: 66.0.3342.0 (Official Build) Revision7a08be580eb458170d11b34a8de66fe08db41bc5-refs/heads/master@{#534887}(32/64-bit)
OS: Windows (7,8,8.1,10),Linux (14.04 LTS),Mac OS X(10.12.6,10.13.1,10.13.4)
URL : http://www.indianotes.com/research-analysis/company/excel.php?cc=MTA1MTAwMDguMDA=&f=company_balance&sector=

What steps will reproduce the problem?
1. Launch chrome,navigate to above url and click on 'Consolidated' link and observe
 
Actual: Unable to open 'Consolidated' link in tab after clicking on it
Expected: Should be able to open 'Consolidated' link in tab after clicking on it

This is regression issue, broken in ‘M 61’ and below is the bisect info :
Good build: 61.0.3115.0  (Revision: 475395).
Bad build: 61.0.3116.0 (Revision: 475721).

You are probably looking for a change made after 475570 (known good), but no later than 475571 (first known bad).

CHANGELOG URL:

The script might not always return single CL as suspect as some perf builds might get missing due to failure.

https://chromium.googlesource.com/chromium/src/+log/72efed69faa7e40480308c569ebcbc90250007d4..1c4bde5b5820211c8954b82648bbe089ca117336

Suspect : https://chromium.googlesource.com/chromium/src/+/1c4bde5b5820211c8954b82648bbe089ca117336

From the CL above, assigning the issue to the concern owner 

@mkwst- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

The above issue is also seen on Stable/Beta build #64.0.3282.140 and Dev build #65.0.3325.51
 
Actual_video.mov
1.1 MB View Download
Expected_video.mov
1004 KB View Download

Comment 1 by rp...@etouch.net, Feb 8 2018

Labels: RegressedIn-61 Target-65 FoundIn-66 Target-66 FoundIn-64 FoundIn-65 Target-64

Comment 2 by mkwst@chromium.org, Feb 8 2018

Components: -Blink Blink>SecurityFeature
Status: WontFix (was: Assigned)
The HTML for that link is:

```
<a href="company-financial.php<br />
Notice:  Undefined variable: params in <b>/home/valuenot/public_html/page_include/companies/inc_company_balance.php</b> on line <b>142</b><br />
&i=consolidated-balance" class="company_financials_info_link_active">Consolidated</a>
```

We're intentionally blocking links that contain both newline characters and `<` characters as a defense against dangling markup injections. In this case, the markup seems pretty clearly to be an unintentional error on the part of the page's author, and means that the link likely wouldn't work even if we weren't blocking it.

I'm marking this as WontFix, as the behavior is intentional. The right course of action here is to file a bug against the site to ask them to fix the link. I looked around a bit for a form; perhaps y'all know where I could find one?

Sign in to add a comment