Adding some people that have worked on navigation. Please assign an owner if you are the wrong people to add!

Setting to low severity since there is not very much time to exploit this and the page still looks like it's loading.

This has come up before, but basically there are mitigating factors since the attacker doesn't know the user's destination URL, and the browser still shows the navigation is in progress.  In more detail:

In  issue 698156  (WontFix), we pointed out that the browser intentionally shows user-initiated URLs while they're pending.  The current page can change its appearance during that time, but there are cues that the navigation is still in progress (e.g., spinner going, no lock icon).  Discussion:
https://bugs.chromium.org/p/chromium/issues/detail?id=698156#c8

Similarly, in  issue 719856  (WontFix), we pointed out this boils down to the omnibox trying to do two jobs at once (showing where you're going and where you are).  We tried making progress on hard UX problems there (and offline), but no luck so far.  Discussion:
https://bugs.chromium.org/p/chromium/issues/detail?id=719856#c11

Marking as a duplicate of the latter, since any discussion to improve the UX should probably happen there.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot