From d0ac7ddcb3a780743e0595491786463edca57b3b Mon Sep 17 00:00:00 2001
From: Alex Rudenko <[email protected]>
Date: Tue, 15 Sep 2026 02:27:21 -0700
Subject: [PATCH] [DevTools] Reject untrusted isolated-app:// navigations in CreateTarget

Isolated Web Apps must be opened at their start_url with the requested
URL routed via launchQueue. `windows.create` enforces this and
`tabs.create`/`tabs.update`/`tabs.duplicate` reject `isolated-app://`
outright; do the same in TargetHandler::CreateTarget so an untrusted
`chrome.debugger` client cannot deep-link an installed IWA to an
arbitrary path.

TAG=agy
CONV=f5689523-802a-43ec-9bb2-7243fcdeda24

Fixed: 532985249
Change-Id: Ibc05ce06653e6a7e953050d9f8ea8338b7e3024a
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8403012
Auto-Submit: Alex Rudenko <[email protected]>
Reviewed-by: Jack Franklin <[email protected]>
Commit-Queue: Alex Rudenko <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1697938}
---
diff --git a/chrome/browser/devtools/protocol/target_handler.cc b/chrome/browser/devtools/protocol/target_handler.cc
index f03b44a..f42366a 100644
--- a/chrome/browser/devtools/protocol/target_handler.cc
+++ b/chrome/browser/devtools/protocol/target_handler.cc
@@ -21,6 +21,7 @@
 #include "chrome/browser/ui/navigator/browser_navigator_params.h"
 #include "chrome/browser/ui/tabs/tab_strip_model.h"
 #include "chrome/common/webui_url_constants.h"
+#include "components/webapps/isolated_web_apps/scheme.h"
 #include "content/public/browser/devtools_agent_host.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/common/url_constants.h"
@@ -172,6 +173,16 @@
         "Navigating to a URL with a privileged scheme is not allowed");
   }
 
+  // Isolated Web Apps must be opened at their start_url with the requested URL
+  // routed via launchQueue. `windows.create` enforces this and
+  // `tabs.create`/`tabs.update`/`tabs.duplicate` reject `isolated-app://`
+  // outright; do the same here so an untrusted `chrome.debugger` client cannot
+  // deep-link an installed IWA to an arbitrary path.
+  if (!is_trusted_ && inner_url.SchemeIs(webapps::kIsolatedAppScheme)) {
+    return protocol::Response::ServerError(
+        "Navigating to an isolated-app:// URL is not allowed");
+  }
+
   if (!may_read_local_files_ && inner_url.SchemeIsFile()) {
     return protocol::Response::ServerError(
         "Creating a target with a local URL is not allowed");