VULNERABILITY NAME: Less authentication on malicious URL redirection URLs

VULNERABILITY DETAILS: 
if someone visits https://www.google.com or any other website and by adding '@facebook.com' or any url after '@' the user will directly redirects to that website without any confirmation from the user.


VERSION:
Chrome Version: 67.0.3396.99(Official Build) (64-bit)
Operating System: Windows 10 Professional

REPRODUCTION CASE:

1. Visit any url like this https://www.google.com@facebook.com
2. It will redirect the user to facebook.com

POC:
video attached

Suggested Patch:
This URL 'https://www.google.com@facebook.com' actually it is making a request an authentication request to facebook.com using username as https://google.com.
So a confirmation should popup to the user every time they visits a URL like this, saying that -
'You are about to visit facebook.com using username as https://google.com. This may be an attempt to trick YOU.

Do you really want to visit facebook.com?'

This can prevent users on visiting malicious websites that they don't intend to visit.

 

Deleted: chrome.mp4 896 KB

	chrome.mp4 896 KB View Download