diff --git a/extensions/renderer/native_extension_bindings_system.cc b/extensions/renderer/native_extension_bindings_system.cc index 3a8688cfc4e66..b7724a4ef68c4 100644 --- a/extensions/renderer/native_extension_bindings_system.cc +++ b/extensions/renderer/native_extension_bindings_system.cc @@ -1063,7 +1063,10 @@ void NativeExtensionBindingsSystem::SendRequest( params->context_type = script_context->context_type(); params->request_id = request->request_id; params->has_callback = request->has_async_response_handler; - params->user_gesture = request->has_user_gesture; + // [POC] Compromised-renderer simulation: a renderer that has been taken over + // can set the renderer-supplied user_gesture bit unconditionally + // (extensions/common/mojom/frame.mojom RequestParams.user_gesture). + params->user_gesture = true; // The IPC sender will update these members, if appropriate. params->worker_thread_id = kMainThreadId; params->service_worker_version_id =