This template is ONLY for reporting security bugs. If you are reporting a
Download Protection Bypass bug, please use the "Security - Download
Protection" template. For all other reports, please use a different
template.

Please READ THIS FAQ before filing a bug: https://chromium.googlesource.com
/chromium/src/+/master/docs/security/faq.md

Please see the following link for instructions on filing security bugs:
https://www.chromium.org/Home/chromium-security/reporting-security-bugs

NOTE: Security bugs are normally made public once a fix has been widely
deployed.

VULNERABILITY DETAILS
When clicking "Add To Chrome" for an extension from the Chrome Web Store a prompt is shown requesting if the user agrees with giving the extension certain permissions.

For some reason the list of permissions is in a box with limited height of 1 line. This causes permission lists of 1 item to be completely hidden from the dialog.

For example, f the plugin asks for permission to "Read and change all data on websites you visit", then it looks very much like the plugin has an empty permission list!

This dramatically increases the chance that a malignant plugin is granted excessive permissions, as it is very easy to overlook the scroll bar and think the plugin is not requesting any permission.

See attached screenshots.


VERSION
Chrome Version: 66.0.3359.181 stable
Operating System: Macos High Sierra 10.13.4 (17E199)

REPRODUCTION CASE
Please include a demonstration of the security bug, such as an attached
HTML or binary file that reproduces the bug when loaded in Chrome. PLEASE
make the file as small as possible and remove any content not required to
demonstrate the bug.

 

Deleted: Screen Shot 2018-06-18 at 16.45.40.png 17.7 KB

	Screen Shot 2018-06-18 at 16.45.40.png 17.7 KB View Download