New issue
Advanced search Search tips

Issue 835495 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 835494
Owner: ----
Closed: Apr 2018
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Permission request UI spoof (repro issue 816033)

Reported by chromium...@gmail.com, Apr 20 2018

Issue description

VERSION
Chrome Version: 68.0.3401.0 (Official Build) canary (64-bit) (cohort: Clang-64)
Operating System: Windows

REPRODUCTION CASE

- Microphone permission shouldn't be allowed or blocked on chrome://settings/content/microphone

1. Set up a local webserver to host poc.html
2. Click on "Click here" button 
3. Observe the permission request stays open after navigation to another origin (with http://localhost wants to...)
 

 
Recording #4.mp4
342 KB View Download
testcase.html
314 bytes View Download
Whoops! double reports, please merge this into  issue 835494 . 

Comment 2 by vakh@chromium.org, Apr 21 2018

Mergedinto: 835494
Status: Duplicate (was: Unconfirmed)
Project Member

Comment 3 by sheriffbot@chromium.org, Aug 3

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 4 Deleted

Sign in to add a comment