Issue metadata
Sign in to add a comment
|
Security: Sandbox Escape&Information Leak
Reported by
faarari...@gmail.com,
May 8 2018
|
||||||||||||||||||||
Issue descriptionChrome Version: 66.0.3359.122 stable Operating System: iOS 11.3.1 iPhoneX POC video: https://youtu.be/t1aVT25GHTA
,
May 9 2018
As far as I can tell from the video, this simply concerns the fact that a user can share (via Share>Apple Messages) a document from the phone's filesystem without that document's URL being loadable within Chrome itself. This does not seem like a vulnerability. The video also seems to show that the error message for a document that does not exist is ERR_FILE_NOT_FOUND, while the error message for a document that exists is ERR_FAILED. This doesn't seem like a vulnerability either, unless the error information were somehow accessible to JavaScript.
,
May 14 2018
,
Aug 21
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by elawrence@chromium.org
, May 9 2018