[server] HTTPS serving /poc-artifacts on 0.0.0.0:8443
=== Launching Chrome (URL=https://a.test:8443/top.html) ===
127.0.0.1 - - [30/May/2026 21:24:00] "GET /top.html HTTP/1.1" 200 -
127.0.0.1 - - [30/May/2026 21:24:00] "GET /embed.html HTTP/1.1" 200 -
127.0.0.1 - - [30/May/2026 21:24:00] code 404, message File not found
127.0.0.1 - - [30/May/2026 21:24:00] "GET /favicon.ico HTTP/1.1" 404 -
[870:870:0530/212400.464496:ERROR:chrome/browser/storage_access_api/storage_access_api_service_impl.cc:87] [SAA-POC] Seeded pre-existing unpartitioned grant STORAGE_ACCESS(https://b.test:8443, https://a.test:8443)=ALLOW expiry=2026-06-19 21:24:00.464183 UTC (1.728e+06 s from now)
[958:958:0530/212400.859957:ERROR:third_party/blink/renderer/core/dom/document.cc:7949] [SAA-POC] [renderer] subframe "https://b.test:8443/embed.html" sending fake UpdateUserActivationState(kNotifyActivation) to browser
[870:870:0530/212400.876556:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:63] [SAA-POC] FrameReceivedUserActivation: embed=https://b.test:8443 top=https://a.test:8443 IsCredentialless=1 IsSandboxed(kStorageAccessByUserActivation)=0 StorageKeyHasNonce=1 grant_expiry_before=2026-06-19 21:24:00.464183 UTC
[870:870:0530/212400.876923:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:79] [SAA-POC] After RenewPermissionGrant: grant_expiry_after=2026-06-29 21:24:00.876638 UTC (delta=864000 s)
[870:870:0530/212400.876962:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:86] [SAA-POC] *** VULNERABILITY CONFIRMED *** nonce-partitioned/credentialless/sandboxed iframe renewed the unpartitioned STORAGE_ACCESS grant for (https://b.test:8443, https://a.test:8443)
=== Done ===