New issue
Advanced search Search tips

Issue 881206 link

Starred by 1 user
Status: Duplicate
Merged: issue 881410
Owner:
tommycli@chromium.org
Closed: Sep 6
Cc:
rsleevi@chromium.org
ios-bugs@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows , iOS , Mac
Pri: 2
Type: Bug-Security



Sign in to add a comment

Security: 'www' will be hidden in address bar for spoof

Reported by xis...@gmail.com, Sep 6 
VULNERABILITY DETAILS
In the Chrome address bar, the string 'www'in the domain name will be hidden. 

VERSION
Chrome Version: 69.0.3497.81+[Stable]
Operating System: [Windows/macOS]

REPRODUCTION CASE
For example, login.www.www.example.com will be displayed as login.example.com in the Chrome address bar.

Comment 1 by mpdenton@google.com, Sep 6

Cc: rsleevi@chromium.org
Components: UI>Browser>Omnibox
Labels: Security_Severity-Medium Security_Impact-Stable OS-iOS OS-Mac OS-Windows Pri-2
Owner: tommycli@chromium.org
Status: Assigned (was: Unconfirmed)
I reproduced this on iOS, but not on ChromeOS or Linux. Not sure if this occurs on Android, but I assume it happens on Windows/Mac based on your report.

Comment 2 by tommycli@chromium.org, Sep 6

Mergedinto: 881410
Status: Duplicate (was: Assigned)

Comment 3 by mpdenton@google.com, Sep 6

Labels: reward_to-xisigr_at_gmail.com
Adding tag for VRP program since this bug was filed before the duped bug.

Comment 4 by xis...@gmail.com, Sep 7 

I am the first people to submit. Why is it marked as duplication?
Project Member

Comment 5 by sheriffbot@chromium.org, Dec 14

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment