I found a XSS vulnerability on this browser.Ok i will explain all.
0x01: i search on something eg.test 
When browser accept, they search test.
Ok.it's working search option.
0x02: i try xss simple payload [<script>alert(1)</script>] ...
Not alert,but browser search payload.
0x03:Lastet i try this payload [javascript:prompt()] ,boom javascript is work and it make alert() when i search in google it's script make domain google.before i think it's google search vulnerability,It's not why i call facebook, yahoo, youtube, ask,twitter put url in this payload. Browser is popup domain name in all.surely it's vulnerability in chrome browser.
Why i can ask chrome browser. This payload is not work in firefox browser and other browser.Only work chrome browser and chrome base browser.

 

Deleted: S80222-07054310.mp4 11.6 MB

	S80222-07054310.mp4 11.6 MB View Download