[*] Chrome: /chromium/chromium/src/out/asan/chrome [*] Extension: /poc-artifacts/extension [*] Profile: /tmp/chrome-poc-profile.78dIFD [*] Log: /poc-artifacts/chrome.log ===== Relevant log lines ===== [455:455:0527/153306.408540:INFO:CONSOLE:23] "[CSP-VT-POC] window.origin="chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa" location=chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sandboxed.html verdict=VULNERABLE: sandbox allow-same-origin smuggled past validator", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/sandboxed.html (23) ============================== [+] BYPASS CONFIRMED: sandboxed page committed with non-opaque chrome-extension:// origin.