[.] Sanitizer coverage enabled. Counter map size: 8117050, Cmp map size: 262144 IMPORTANT DEBUGGING NOTE: batches of tests are run inside their own process. For debugging a test inside a debugger, use the --gtest_filter= flag along with --single-process-tests. Using sharding settings from environment. This is shard 0/1 Using 1 parallel jobs. [.] Sanitizer coverage enabled. Counter map size: 8117050, Cmp map size: 262144 Note: Google Test filter = SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb [==========] Running 1 test from 1 test suite. [----------] Global test environment set-up. [----------] 1 test from SubresourceSignedExchangeURLLoaderFactoryTest [ RUN ] SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb [POC] BASELINE (url=https://victim.example/secret.html): received_response=0 error_code=-2 cors_error=3 ../../content/browser/web_package/subresource_signed_exchange_url_loader_factory_unittest.cc:271: Failure Value of: client.has_received_response() Actual: false Expected: true SPOOFED: factory accepted spoofed url and sent OnReceiveResponse -> CORS/ORB bypass. Stack trace: #0 0x557f6b5cd7a9 (/chromium/chromium/src/out/asan/content_unittests+0x15c207a8) [ FAILED ] SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb (7 ms) [----------] 1 test from SubresourceSignedExchangeURLLoaderFactoryTest (76 ms total) [----------] Global test environment tear-down [==========] 1 test from 1 test suite ran. (76 ms total) [ PASSED ] 0 tests. [ FAILED ] 1 test, listed below: [ FAILED ] SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb 1 FAILED TEST [1/1] SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb (7 ms) 1 test failed: SubresourceSignedExchangeURLLoaderFactoryTest.SpoofedRequestUrlBypassesCorsAndOrb (../../content/browser/web_package/subresource_signed_exchange_url_loader_factory_unittest.cc:194) Tests took 1 seconds.