[4572:4572:0517/170957.195049:INFO:CONSOLE:15] "[poc] requesting geolocation permission...", source: http://127.0.0.1:19234/poc.html?poc-trigger (15)
[4572:4572:0517/170959.159006:INFO:CONSOLE:15] "[poc] triggering compromised-renderer IPC via scroll...", source: http://127.0.0.1:19234/poc.html?poc-trigger (15)
[4647:4647:0517/170959.159852:ERROR:components/autofill/content/renderer/password_generation_agent.cc:342] [POC-RENDERER] firing ShowPasswordEditingPopup IPC bounds=10,2 320x24
[4572:4572:0517/170959.168023:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:595] [POC-BROWSER] PopupBaseView::DoUpdateBoundsAndRedrawPopup class=PasswordGenerationPopupViewViews popup_bounds=109,178 390x109 element_bounds=10,144 320x26 content_area=0,143 1400x857 overlaps_permission_prompt=YES overlaps_any_open_prompt=YES z_order=kSecuritySurface
[4572:4572:0517/170959.168059:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:604] [POC-BROWSER] *** VULNERABILITY CONFIRMED *** PasswordGenerationPopupViewViews is being shown at kSecuritySurface z-order while overlapping an open permission/dialog prompt. The base-class DoUpdateBoundsAndRedrawPopup lacks the BoundsOverlapWithOpenPermissionsPrompt/BoundsOverlapWithAnyOpenPrompt checks present in PopupViewViews — the popup will render on top of the permission bubble.
[4572:4572:0517/170959.168270:ERROR:chrome/browser/ui/views/autofill/popup/popup_base_view.cc:315] [POC-BROWSER] PasswordGenerationPopupViewViews widget shown; IsVisible=YES bounds_in_screen=105,170 398x123 InitParams.z_order=kSecuritySurface(feature AutofillPopupZOrderSecuritySurface enabled=YES)
[4572:4572:0517/171005.159299:INFO:CONSOLE:15] "[poc] done", source: http://127.0.0.1:19234/poc.html?poc-trigger (15)