==========================================================================
RUN 1: Control page (non-sandboxed) — http://localhost:8080/
==========================================================================

--- Browser-process [POC] instrumentation ---
[707:707:0403/142436.464246:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.464337:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.464402:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.464454:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.464513:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.464812:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.464875:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.464911:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.464941:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.465000:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.465163:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.465211:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.465257:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.465292:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.465357:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.465545:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.465586:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.465620:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/
[707:707:0403/142436.465648:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/ (origin was opaque=1)
[707:707:0403/142436.465691:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (5EA029009F17220E6F36F529125884C1) anonymous] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.797108:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.797281:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.797565:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.797674:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.797785:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.880349:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.880494:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.880561:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.888201:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.888293:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.888371:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.910102:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.910322:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.910425:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.910883:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.911034:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.916653:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.916756:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.916838:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.917211:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.917283:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.925693:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.925826:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.925908:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142436.926341:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142436.926423:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/
[707:707:0403/142439.921104:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=http://localhost:8080 opaque=0 GetURL()=http://localhost:8080/ visible_url=http://localhost:8080/
[707:707:0403/142439.921355:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=http://localhost:8080 requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/ canonical_requesting_origin=http://localhost:8080/

--- Page console output ---
[707:707:0403/142436.812563:INFO:CONSOLE:13] "[POC-PAGE] document.location.href = http://localhost:8080/", source: http://localhost:8080/ (13)
[707:707:0403/142436.812767:INFO:CONSOLE:13] "[POC-PAGE] window.origin          = "http://localhost:8080"", source: http://localhost:8080/ (13)
[707:707:0403/142436.812875:INFO:CONSOLE:13] "[POC-PAGE] self.isSecureContext   = true", source: http://localhost:8080/ (13)
[707:707:0403/142436.812976:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/ (13)
[707:707:0403/142436.888086:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"geolocation"}).state = "granted"", source: http://localhost:8080/ (13)
[707:707:0403/142436.912702:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"notifications"}).state = "granted"", source: http://localhost:8080/ (13)
[707:707:0403/142436.912842:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/ (13)
[707:707:0403/142436.912955:INFO:CONSOLE:13] "[POC-PAGE] Control page (not sandboxed). Permission state: granted. Now navigate to /sandboxed to see the bypass.", source: http://localhost:8080/ (13)


==========================================================================
RUN 2: Sandboxed page (CSP: sandbox allow-scripts) — http://localhost:8080/sandboxed
==========================================================================

--- Browser-process [POC] instrumentation ---
[966:966:0403/142550.504169:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.504306:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.504400:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.504463:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.504569:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142550.505034:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.505117:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.505190:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.505260:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.505362:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142550.505646:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.505742:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.505829:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.505898:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.506005:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142550.506398:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.506468:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.506530:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142550.506594:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142550.506678:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (9A5A858DC9A738419DEEFB4684F480F6) anonymous] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.138563:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.138697:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.138843:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/
[966:966:0403/142551.139187:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.139307:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.139401:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.140274:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.140478:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.324559:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.324718:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.324851:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.324951:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.325072:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.344542:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.344667:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.344789:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.344877:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.345002:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.348927:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.349026:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.349138:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.349215:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.349321:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.350079:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.350155:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.350240:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.351851:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.351934:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.352023:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.352088:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.352181:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.352570:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.352639:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.352708:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/
[966:966:0403/142551.353678:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.353763:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.353847:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.353941:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.354030:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/sandboxed embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed
[966:966:0403/142551.354775:ERROR:components/permissions/permission_util.cc:464] [POC] GetLastCommittedOriginAsURL called: origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] opaque=1 GetURL()= visible_url=http://localhost:8080/sandboxed
[966:966:0403/142551.355041:ERROR:components/permissions/permission_util.cc:473] [POC] *** FALLBACK FIRED *** Opaque/empty origin substituted with VisibleURL: http://localhost:8080/sandboxed (origin was opaque=1)
[966:966:0403/142551.355157:ERROR:components/permissions/permission_manager.cc:610] [POC] GetPermissionStatusInternal: rfh_origin=null [internally: (BC9E7CDF521448449B3A3A9B9EEF2A2C) derived from http://localhost:8080] requesting_origin=http://localhost:8080/ embedding_origin=http://localhost:8080/sandboxed canonical_requesting_origin=http://localhost:8080/sandboxed

--- Page console output ---
[966:966:0403/142551.180604:INFO:CONSOLE:13] "[POC-PAGE] document.location.href = http://localhost:8080/sandboxed", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.180939:INFO:CONSOLE:13] "[POC-PAGE] window.origin          = "null"", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.181206:INFO:CONSOLE:13] "[POC-PAGE] self.isSecureContext   = true", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.181343:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.345875:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"geolocation"}).state = "granted"", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.350738:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"notifications"}).state = "granted"", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.350905:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/sandboxed (13)
[966:966:0403/142551.351063:INFO:CONSOLE:13] "[POC-PAGE] *** BUG CONFIRMED ***  origin is "null" (opaque) but geolocation permission state is "granted". The CSP sandbox boundary has been bypassed: this opaque-origin document is reusing the permission grant for localhost:8080.", source: http://localhost:8080/sandboxed (13)